You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by "Tk, Pramod (NSN - IN/Bangalore)" <pr...@nsn.com> on 2009/08/12 08:06:28 UTC
Problem in configuring tomcat for PKCS 11 for HSM
Hello,
I have configured apache-tomcat-6.0.20 for PKCS11 to use the keystore
present on HSM(Hardware security Module) which is SCA6000 in my case.
My Connector looks like this
<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
protocols="TLSv1"
algorithm="SunX509"
keystore="NONE" keystoreType="PKCS11"
keystoreProvider="SunPKCS11-SCA6000" keystorePass="XXXXXXXXX"
/>
This works fine by taking the a random certificate from the keystore.
But,
If I specify the keyAlias = "SpecificCerificate" , in the Connector I am
getting the folling Exception
java.security.KeyManagementException: FIPS mode: only SunJSSE
KeyManagers may be used
at
com.sun.net.ssl.internal.ssl.SSLContextImpl.chooseKeyManager(Unknown
Source)
at
com.sun.net.ssl.internal.ssl.SSLContextImpl.engineInit(Unknown Source)
at javax.net.ssl.SSLContext.init(Unknown Source)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory
.java:416)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
tFactory.java:131)
at
org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:503)
at
org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)
at
org.apache.catalina.connector.Connector.initialize(Connector.java:1058)
at
org.apache.catalina.core.StandardService.initialize(StandardService.java
:677)
at
org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
95)
at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at
org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
at
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
------------------------------------------------------------------------
----------
Aug 11, 2009 11:33:12 PM org.apache.coyote.http11.Http11Protocol init
SEVERE: Error initializing endpoint
java.io.IOException: FIPS mode: only SunJSSE KeyManagers may be used
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory
.java:462)
at
org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
tFactory.java:131)
at
org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:503)
at
org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)
at
org.apache.catalina.connector.Connector.initialize(Connector.java:1058)
at
org.apache.catalina.core.StandardService.initialize(StandardService.java
:677)
at
org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
95)
at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at
org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
at
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
Aug 11, 2009 11:33:12 PM org.apache.catalina.startup.Catalina load
SEVERE: Catalina.start
LifecycleException: Protocol handler initialization failed:
java.io.IOException: FIPS mode: only SunJSSE KeyManagers may be used
at
org.apache.catalina.connector.Connector.initialize(Connector.java:1060)
at
org.apache.catalina.core.StandardService.initialize(StandardService.java
:677)
at
org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
95)
at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at
org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
at
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
We have made JSSE FIPS compaliant.
Any help would be appreciated.
With Best Regards,
Pramod TK
Re: Problem in configuring tomcat for PKCS 11 for HSM
Posted by Saibabu <sa...@gmail.com>.
Hi,
Did you find the solution? Are you able to use PKCS11 configuration in
tomcat and/or JBoss servers?
I have similar issue now. Let me know if you were able to fix it.
Thank you very much in advance.
Sai
Tk, Pramod (NSN - IN/Bangalore) wrote:
>
> Hello,
>
> I have configured apache-tomcat-6.0.20 for PKCS11 to use the keystore
> present on HSM(Hardware security Module) which is SCA6000 in my case.
>
> My Connector looks like this
>
> <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
> maxThreads="150" scheme="https" secure="true"
> clientAuth="false" sslProtocol="TLS"
> protocols="TLSv1"
> algorithm="SunX509"
> keystore="NONE" keystoreType="PKCS11"
> keystoreProvider="SunPKCS11-SCA6000" keystorePass="XXXXXXXXX"
> />
>
> This works fine by taking the a random certificate from the keystore.
>
> But,
>
> If I specify the keyAlias = "SpecificCerificate" , in the Connector I am
> getting the folling Exception
>
> java.security.KeyManagementException: FIPS mode: only SunJSSE
> KeyManagers may be used
> at
> com.sun.net.ssl.internal.ssl.SSLContextImpl.chooseKeyManager(Unknown
> Source)
> at
> com.sun.net.ssl.internal.ssl.SSLContextImpl.engineInit(Unknown Source)
> at javax.net.ssl.SSLContext.init(Unknown Source)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory
> .java:416)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
> tFactory.java:131)
> at
> org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:503)
> at
> org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)
> at
> org.apache.catalina.connector.Connector.initialize(Connector.java:1058)
> at
> org.apache.catalina.core.StandardService.initialize(StandardService.java
> :677)
> at
> org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
> 95)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at
> org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
> at
> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
> ------------------------------------------------------------------------
> ----------
> Aug 11, 2009 11:33:12 PM org.apache.coyote.http11.Http11Protocol init
> SEVERE: Error initializing endpoint
> java.io.IOException: FIPS mode: only SunJSSE KeyManagers may be used
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory
> .java:462)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
> tFactory.java:131)
> at
> org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:503)
> at
> org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)
> at
> org.apache.catalina.connector.Connector.initialize(Connector.java:1058)
> at
> org.apache.catalina.core.StandardService.initialize(StandardService.java
> :677)
> at
> org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
> 95)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at
> org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
> at
> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
> Aug 11, 2009 11:33:12 PM org.apache.catalina.startup.Catalina load
> SEVERE: Catalina.start
> LifecycleException: Protocol handler initialization failed:
> java.io.IOException: FIPS mode: only SunJSSE KeyManagers may be used
> at
> org.apache.catalina.connector.Connector.initialize(Connector.java:1060)
> at
> org.apache.catalina.core.StandardService.initialize(StandardService.java
> :677)
> at
> org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
> 95)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at
> org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
> at
> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
>
>
> We have made JSSE FIPS compaliant.
> Any help would be appreciated.
>
>
> With Best Regards,
> Pramod TK
>
>
--
View this message in context: http://old.nabble.com/Problem-in-configuring-tomcat-for-PKCS-11-for-HSM-tp24930607p28468128.html
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Problem in configuring tomcat for PKCS 11 for HSM
Posted by Mark Thomas <ma...@apache.org>.
Mark Thomas wrote:
> Tk, Pramod (NSN - IN/Bangalore) wrote:
>> Hello,
>>
>> I have configured apache-tomcat-6.0.20 for PKCS11 to use the keystore
>> present on HSM(Hardware security Module) which is SCA6000 in my case.
>
> I think you have found a bug but confirming this and then fixing it is
> going to be somewhat complicated by not having access to a hardware
> keystore.
Scratch that. I have looked at the code some more and I see what the
problem is. The KeyManager interface provides no mechanism for
specifying a default alias. Therefore, if you specify an alias Tomcat
has to wrap each KeyManager to ensure that the correct alias is
returned. This wrapper is Tomcat code, not part of JSSE, and therefore
not part of the FIPS accreditation. Hence you see the error. I can't see
any way to code around this problem.
With no alias, the KeyManager is not wrapped but you get a random key.
Looking at the features of the SCA6000 [1], one of them is multiple
keystores. You'll need to configure a dedicated keystore for Tomcat with
the single key and not specify the alias in the connector.
Mark
[1]
http://www.sun.com/products/networking/sslaccel/suncryptoaccel6000/features.xml#anchor3
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Problem in configuring tomcat for PKCS 11 for HSM
Posted by Mark Thomas <ma...@apache.org>.
Tk, Pramod (NSN - IN/Bangalore) wrote:
> Hello,
>
> I have configured apache-tomcat-6.0.20 for PKCS11 to use the keystore
> present on HSM(Hardware security Module) which is SCA6000 in my case.
I think you have found a bug but confirming this and then fixing it is
going to be somewhat complicated by not having access to a hardware
keystore.
I don't suppose you have a development box with similar hardware and a
test key that you'd be happy for someone to ssh into?
If not, we can the somewhat slower trial and error with patches approach.
Mark
>
> My Connector looks like this
>
> <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
> maxThreads="150" scheme="https" secure="true"
> clientAuth="false" sslProtocol="TLS"
> protocols="TLSv1"
> algorithm="SunX509"
> keystore="NONE" keystoreType="PKCS11"
> keystoreProvider="SunPKCS11-SCA6000" keystorePass="XXXXXXXXX"
> />
>
> This works fine by taking the a random certificate from the keystore.
>
> But,
>
> If I specify the keyAlias = "SpecificCerificate" , in the Connector I am
> getting the folling Exception
>
> java.security.KeyManagementException: FIPS mode: only SunJSSE
> KeyManagers may be used
> at
> com.sun.net.ssl.internal.ssl.SSLContextImpl.chooseKeyManager(Unknown
> Source)
> at
> com.sun.net.ssl.internal.ssl.SSLContextImpl.engineInit(Unknown Source)
> at javax.net.ssl.SSLContext.init(Unknown Source)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory
> .java:416)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
> tFactory.java:131)
> at
> org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:503)
> at
> org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)
> at
> org.apache.catalina.connector.Connector.initialize(Connector.java:1058)
> at
> org.apache.catalina.core.StandardService.initialize(StandardService.java
> :677)
> at
> org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
> 95)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at
> org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
> at
> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
> ------------------------------------------------------------------------
> ----------
> Aug 11, 2009 11:33:12 PM org.apache.coyote.http11.Http11Protocol init
> SEVERE: Error initializing endpoint
> java.io.IOException: FIPS mode: only SunJSSE KeyManagers may be used
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory
> .java:462)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
> tFactory.java:131)
> at
> org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:503)
> at
> org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)
> at
> org.apache.catalina.connector.Connector.initialize(Connector.java:1058)
> at
> org.apache.catalina.core.StandardService.initialize(StandardService.java
> :677)
> at
> org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
> 95)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at
> org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
> at
> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
> Aug 11, 2009 11:33:12 PM org.apache.catalina.startup.Catalina load
> SEVERE: Catalina.start
> LifecycleException: Protocol handler initialization failed:
> java.io.IOException: FIPS mode: only SunJSSE KeyManagers may be used
> at
> org.apache.catalina.connector.Connector.initialize(Connector.java:1060)
> at
> org.apache.catalina.core.StandardService.initialize(StandardService.java
> :677)
> at
> org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
> 95)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at
> org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
> at
> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
>
>
> We have made JSSE FIPS compaliant.
> Any help would be appreciated.
>
>
> With Best Regards,
> Pramod TK
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org
Re: Problem in configuring tomcat for PKCS 11 for HSM
Posted by Israr Ahmed <is...@gmail.com>.
Hi,
I've successfully configured apache-tomcat-6.0.18 with JRE 1.6.0_13 for
PKCS11 with keystore on smart card token but failed to use keystore on HSM
which is in my case "Eracom PSO:PL50"
I've statically add a provider in java.security file
security.provider.10=sun.security.pkcs11.SunPKCS11
${java.home}/lib/security/pkcs11.cfg
pkcs11.cfg contains the following entries:
name = tokenName e.g. Token1
library = mypkcs11.dll
slot = 0
and my connector settings are:
<Connector port="4445"
minSpareThreads="25"
maxThreads="150"
maxSpareThreads="75"
maxHttpHeaderSize="8192"
enableLookups="false"
disableUploadTimeout="true"
acceptCount="100"
connectionTimeout="60000"
SSLEnabled="true"
scheme="https"
secure="true"
clientAuth="true"
sslProtocol="TLS"
keystoreType="PKCS11"
keystorePass="password"
ciphers="SSL_RSA_WITH_RC4_128_SHA"/>
These settings work fine with PKCS11 smart card token but when i try to use
these settings for network HSM which is "Eracom PSO:PL50", i'm unable to
communicate with network HSM, I applied the changes against library and name
properties in pkcs11.cfg for HSM.
I've also configured my connector like:
<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
protocols="TLSv1"
algorithm="SunX509"
keystore="NONE" keystoreType="PKCS11"
keystoreProvider="SunPKCS11-HSMName" keystorePass="XXXXXXXXX"
/>
but still no progress.
I'm unable to find out the solution. I'll be thankful to you if you figure
out me the problematic area or suggest any solution to resolve this problem.
Thanks in advance.
Regards,
Israr Ahmed
Tk, Pramod (NSN - IN/Bangalore) wrote:
>
> Hello,
>
> I have configured apache-tomcat-6.0.20 for PKCS11 to use the keystore
> present on HSM(Hardware security Module) which is SCA6000 in my case.
>
> My Connector looks like this
>
> <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
> maxThreads="150" scheme="https" secure="true"
> clientAuth="false" sslProtocol="TLS"
> protocols="TLSv1"
> algorithm="SunX509"
> keystore="NONE" keystoreType="PKCS11"
> keystoreProvider="SunPKCS11-SCA6000" keystorePass="XXXXXXXXX"
> />
>
> This works fine by taking the a random certificate from the keystore.
>
> But,
>
> If I specify the keyAlias = "SpecificCerificate" , in the Connector I am
> getting the folling Exception
>
> java.security.KeyManagementException: FIPS mode: only SunJSSE
> KeyManagers may be used
> at
> com.sun.net.ssl.internal.ssl.SSLContextImpl.chooseKeyManager(Unknown
> Source)
> at
> com.sun.net.ssl.internal.ssl.SSLContextImpl.engineInit(Unknown Source)
> at javax.net.ssl.SSLContext.init(Unknown Source)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory
> .java:416)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
> tFactory.java:131)
> at
> org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:503)
> at
> org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)
> at
> org.apache.catalina.connector.Connector.initialize(Connector.java:1058)
> at
> org.apache.catalina.core.StandardService.initialize(StandardService.java
> :677)
> at
> org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
> 95)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at
> org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
> at
> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
> ------------------------------------------------------------------------
> ----------
> Aug 11, 2009 11:33:12 PM org.apache.coyote.http11.Http11Protocol init
> SEVERE: Error initializing endpoint
> java.io.IOException: FIPS mode: only SunJSSE KeyManagers may be used
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory
> .java:462)
> at
> org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocke
> tFactory.java:131)
> at
> org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:503)
> at
> org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:176)
> at
> org.apache.catalina.connector.Connector.initialize(Connector.java:1058)
> at
> org.apache.catalina.core.StandardService.initialize(StandardService.java
> :677)
> at
> org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
> 95)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at
> org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
> at
> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
> Aug 11, 2009 11:33:12 PM org.apache.catalina.startup.Catalina load
> SEVERE: Catalina.start
> LifecycleException: Protocol handler initialization failed:
> java.io.IOException: FIPS mode: only SunJSSE KeyManagers may be used
> at
> org.apache.catalina.connector.Connector.initialize(Connector.java:1060)
> at
> org.apache.catalina.core.StandardService.initialize(StandardService.java
> :677)
> at
> org.apache.catalina.core.StandardServer.initialize(StandardServer.java:7
> 95)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:535)
> at org.apache.catalina.startup.Catalina.load(Catalina.java:555)
> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
> at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown
> Source)
> at java.lang.reflect.Method.invoke(Unknown Source)
> at
> org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:260)
> at
> org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:412)
>
>
> We have made JSSE FIPS compaliant.
> Any help would be appreciated.
>
>
> With Best Regards,
> Pramod TK
>
>
--
View this message in context: http://www.nabble.com/Problem-in-configuring-tomcat-for-PKCS-11-for-HSM-tp24930607p25905678.html
Sent from the Tomcat - User mailing list archive at Nabble.com.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org