You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2004/03/30 07:39:31 UTC

DO NOT REPLY [Bug 28038] New: - PKCS12 keystoreType doesn't work with IE Browser

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=28038>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=28038

PKCS12 keystoreType doesn't work with IE Browser

           Summary: PKCS12 keystoreType doesn't work with IE Browser
           Product: Tomcat 5
           Version: 5.0.19
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: Major
          Priority: Other
         Component: Connector:Coyote
        AssignedTo: tomcat-dev@jakarta.apache.org
        ReportedBy: apache@chrismelo.net


I set up a PKCS12 store, got it running and it worked fine when browsing with
Netscape (Lin & Win) and Konquerer and OpenSSL command-line, but IE would report
that it could not find the server.  I enabled TLS in IE internet options and
tried sslProtocol="SSL" but I could not get it to work.

About my IE: Version 6.0 w/all the fixes on Win2K SP4
About my P12: Created with OpenSSL 0.9.7d  Had a hostname cert and root cert
chained.
Tomcat: 5.0.19 with SDK 1.4.2_04
OS: Linux 2.4.21 Mandrake

This is what the coyote portion of my server.xml section looked like:
    <Connector port="443"
               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" debug="0" scheme="https" secure="true"
               clientAuth="false" sslProtocol="SSL"

               keystoreFile="/usr/local/tomcat/conf/ssl/louisbourg.p12"
               keystoreType="PKCS12"
               keystorePass="changeit"
        />

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org