You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ofbiz.apache.org by Info Olagos <in...@gmail.com> on 2011/03/13 18:17:38 UTC

ssl certificate installation problem

Hello,

I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml
file in ofbiz release09.04.
So my catalina webserver is not starting because of this "protocol" error
after installing a certificate for ssl.

Can anyone check my parameters in this part of the file.


<!-- SSL connector attributes -->

<property name="sSLImplementation"
value="org.ofbiz.catalina.container.SSLImpl"/>

<property name="algorithm" value="RSA"/>

<!-- the clientAuth to "want" in order to receive certs from the client;

note that this isn't set this way by default because with certain browsers

(like Safari) it breaks access via HTTPS, so until that problem is fixed

the default will be false -->

<property name="clientAuth" value="false"/>

<property name="keystoreFile" value="framework/base/config/cert.txt"/>

<property name="keystorePass" value="*******"/>

<property name="keystoreType" value="PKCS12"/>

<property name="sslProtocol" value="TLS"/>

<property name="ciphers" value=""/>


Thanks for helping me.,

Heidi


-- 
Olagos bvba
http://www.olagos.eu <http://www.olagos.eu/>
http://www.olagos.com
http://www.olagos.be
http://www.olagos.nl
Olagos team
Heesterbos 5
2570 Duffel
Belgium

Re: ssl certificate installation problem

Posted by MICHAEL BUTLER <mi...@btinternet.com>.
Mari, espera un poco, para hablar con esta chica, por que seguramente vuelvo el 
dia  29 como lo previsto, pues asi no me puedo operar con tanta intranquilidad y 
inseguridad con lo de mi padre. Prefiero ir a despedirme de el y a recoger el 
dinero y a arreglar lo del paro. Despues de una operacion asi yo no estare ni 
para viajar ni para nada en unos meses , entonces mi esposo prefiere que arregle 
todo lo mio y luego con tranquilidad me acomode aqui y haga todo con 
tranquilidad y tiempo, pues estoy en un estado de ansiedad muy fuerte.
Que te parece ?

Puri


________________________________
From: Info Olagos <in...@gmail.com>
To: user@ofbiz.apache.org
Sent: Sunday, 13 March, 2011 19:22:51
Subject: Re: ssl certificate installation problem

The error i get is:

java.io.IOException: toDerInputStream rejects tag type 45.

regards,
Heidi

2011/3/13 Info Olagos <in...@gmail.com>

> Hello,
>
> I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml
> file in ofbiz release09.04.
> So my catalina webserver is not starting because of this "protocol" error
> after installing a certificate for ssl.
>
> Can anyone check my parameters in this part of the file.
>
>
> <!-- SSL connector attributes -->
>
> <property name="sSLImplementation"
> value="org.ofbiz.catalina.container.SSLImpl"/>
>
> <property name="algorithm" value="RSA"/>
>
> <!-- the clientAuth to "want" in order to receive certs from the client;
>
> note that this isn't set this way by default because with certain browsers
>
> (like Safari) it breaks access via HTTPS, so until that problem is fixed
>
> the default will be false -->
>
> <property name="clientAuth" value="false"/>
>
> <property name="keystoreFile" value="framework/base/config/cert.txt"/>
>
> <property name="keystorePass" value="*******"/>
>
> <property name="keystoreType" value="PKCS12"/>
>
> <property name="sslProtocol" value="TLS"/>
>
> <property name="ciphers" value=""/>
>
>
> Thanks for helping me.,
>
> Heidi
>
>
> --
> Olagos bvba
> http://www.olagos.eu <http://www.olagos.eu/>
> http://www.olagos.com
> http://www.olagos.be
> http://www.olagos.nl
> Olagos team
> Heesterbos 5
> 2570 Duffel
> Belgium
>
>
>
>


-- 
Olagos bvba
http://www.olagos.eu <http://www.olagos.eu/>
http://www.olagos.com
http://www.olagos.be
http://www.olagos.nl
Olagos team
Heesterbos 5
2570 Duffel
Belgium



      

Re: ssl certificate installation problem

Posted by Info Olagos <in...@gmail.com>.
Seems to be an error in the certificate :
following pkcs12 standard and asn.1 standard there is an error in the length
of a tag following asn.1 formats.

anyone agrees?

Heidi
2011/3/13 Info Olagos <in...@gmail.com>

> Hello,
>
> If i do :
> keytool -list -keystore eric -storetype pkcs12
> it gives me the following error:
> keytool error: java.io.IOException: DerInputStream.getLength():
> lengthTag=109, too big.
>
> Anyone an idea? Have i to convert my pkcs12 certificate still to something
> else?
>
> regards,
> Heidi
>
> 2011/3/13 Info Olagos <in...@gmail.com>
>
>> The error i get is:
>>
>> java.io.IOException: toDerInputStream rejects tag type 45.
>>
>> regards,
>> Heidi
>>
>>   2011/3/13 Info Olagos <in...@gmail.com>
>>
>>> Hello,
>>>
>>> I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml
>>> file in ofbiz release09.04.
>>> So my catalina webserver is not starting because of this "protocol" error
>>> after installing a certificate for ssl.
>>>
>>> Can anyone check my parameters in this part of the file.
>>>
>>>
>>> <!-- SSL connector attributes -->
>>>
>>> <property name="sSLImplementation"
>>> value="org.ofbiz.catalina.container.SSLImpl"/>
>>>
>>> <property name="algorithm" value="RSA"/>
>>>
>>> <!-- the clientAuth to "want" in order to receive certs from the client;
>>>
>>> note that this isn't set this way by default because with certain
>>> browsers
>>>
>>> (like Safari) it breaks access via HTTPS, so until that problem is fixed
>>>
>>> the default will be false -->
>>>
>>> <property name="clientAuth" value="false"/>
>>>
>>> <property name="keystoreFile" value="framework/base/config/cert.txt"/>
>>>
>>> <property name="keystorePass" value="*******"/>
>>>
>>> <property name="keystoreType" value="PKCS12"/>
>>>
>>> <property name="sslProtocol" value="TLS"/>
>>>
>>> <property name="ciphers" value=""/>
>>>
>>>
>>> Thanks for helping me.,
>>>
>>> Heidi
>>>
>>>
>>> --
>>> Olagos bvba
>>> http://www.olagos.eu <http://www.olagos.eu/>
>>> http://www.olagos.com
>>> http://www.olagos.be
>>> http://www.olagos.nl
>>> Olagos team
>>> Heesterbos 5
>>> 2570 Duffel
>>> Belgium
>>>
>>>
>>>
>>>
>>
>>
>> --
>> Olagos bvba
>> http://www.olagos.eu <http://www.olagos.eu/>
>> http://www.olagos.com
>> http://www.olagos.be
>> http://www.olagos.nl
>> Olagos team
>> Heesterbos 5
>> 2570 Duffel
>> Belgium
>>
>>
>>
>>
>
>
> --
> Olagos bvba
> http://www.olagos.eu <http://www.olagos.eu/>
> http://www.olagos.com
> http://www.olagos.be
> http://www.olagos.nl
> Olagos team
> Heesterbos 5
> 2570 Duffel
> Belgium
>
>
>
>


-- 
Olagos bvba
http://www.olagos.eu <http://www.olagos.eu/>
http://www.olagos.com
http://www.olagos.be
http://www.olagos.nl
Olagos team
Heesterbos 5
2570 Duffel
Belgium

Re: ssl certificate installation problem

Posted by Info Olagos <in...@gmail.com>.
Hello,

If i do :
keytool -list -keystore eric -storetype pkcs12
it gives me the following error:
keytool error: java.io.IOException: DerInputStream.getLength():
lengthTag=109, too big.

Anyone an idea? Have i to convert my pkcs12 certificate still to something
else?

regards,
Heidi

2011/3/13 Info Olagos <in...@gmail.com>

> The error i get is:
>
> java.io.IOException: toDerInputStream rejects tag type 45.
>
> regards,
> Heidi
>
>   2011/3/13 Info Olagos <in...@gmail.com>
>
>> Hello,
>>
>> I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml
>> file in ofbiz release09.04.
>> So my catalina webserver is not starting because of this "protocol" error
>> after installing a certificate for ssl.
>>
>> Can anyone check my parameters in this part of the file.
>>
>>
>> <!-- SSL connector attributes -->
>>
>> <property name="sSLImplementation"
>> value="org.ofbiz.catalina.container.SSLImpl"/>
>>
>> <property name="algorithm" value="RSA"/>
>>
>> <!-- the clientAuth to "want" in order to receive certs from the client;
>>
>> note that this isn't set this way by default because with certain browsers
>>
>> (like Safari) it breaks access via HTTPS, so until that problem is fixed
>>
>> the default will be false -->
>>
>> <property name="clientAuth" value="false"/>
>>
>> <property name="keystoreFile" value="framework/base/config/cert.txt"/>
>>
>> <property name="keystorePass" value="*******"/>
>>
>> <property name="keystoreType" value="PKCS12"/>
>>
>> <property name="sslProtocol" value="TLS"/>
>>
>> <property name="ciphers" value=""/>
>>
>>
>> Thanks for helping me.,
>>
>> Heidi
>>
>>
>> --
>> Olagos bvba
>> http://www.olagos.eu <http://www.olagos.eu/>
>> http://www.olagos.com
>> http://www.olagos.be
>> http://www.olagos.nl
>> Olagos team
>> Heesterbos 5
>> 2570 Duffel
>> Belgium
>>
>>
>>
>>
>
>
> --
> Olagos bvba
> http://www.olagos.eu <http://www.olagos.eu/>
> http://www.olagos.com
> http://www.olagos.be
> http://www.olagos.nl
> Olagos team
> Heesterbos 5
> 2570 Duffel
> Belgium
>
>
>
>


-- 
Olagos bvba
http://www.olagos.eu <http://www.olagos.eu/>
http://www.olagos.com
http://www.olagos.be
http://www.olagos.nl
Olagos team
Heesterbos 5
2570 Duffel
Belgium

Re: ssl certificate installation problem

Posted by MICHAEL BUTLER <mi...@btinternet.com>.
Sorry for previous email.

Someone else was using my computer

Mike BUtler




________________________________
From: Info Olagos <in...@gmail.com>
To: user@ofbiz.apache.org
Sent: Sunday, 13 March, 2011 19:22:51
Subject: Re: ssl certificate installation problem

The error i get is:

java.io.IOException: toDerInputStream rejects tag type 45.

regards,
Heidi

2011/3/13 Info Olagos <in...@gmail.com>

> Hello,
>
> I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml
> file in ofbiz release09.04.
> So my catalina webserver is not starting because of this "protocol" error
> after installing a certificate for ssl.
>
> Can anyone check my parameters in this part of the file.
>
>
> <!-- SSL connector attributes -->
>
> <property name="sSLImplementation"
> value="org.ofbiz.catalina.container.SSLImpl"/>
>
> <property name="algorithm" value="RSA"/>
>
> <!-- the clientAuth to "want" in order to receive certs from the client;
>
> note that this isn't set this way by default because with certain browsers
>
> (like Safari) it breaks access via HTTPS, so until that problem is fixed
>
> the default will be false -->
>
> <property name="clientAuth" value="false"/>
>
> <property name="keystoreFile" value="framework/base/config/cert.txt"/>
>
> <property name="keystorePass" value="*******"/>
>
> <property name="keystoreType" value="PKCS12"/>
>
> <property name="sslProtocol" value="TLS"/>
>
> <property name="ciphers" value=""/>
>
>
> Thanks for helping me.,
>
> Heidi
>
>
> --
> Olagos bvba
> http://www.olagos.eu <http://www.olagos.eu/>
> http://www.olagos.com
> http://www.olagos.be
> http://www.olagos.nl
> Olagos team
> Heesterbos 5
> 2570 Duffel
> Belgium
>
>
>
>


-- 
Olagos bvba
http://www.olagos.eu <http://www.olagos.eu/>
http://www.olagos.com
http://www.olagos.be
http://www.olagos.nl
Olagos team
Heesterbos 5
2570 Duffel
Belgium



      

Re: ssl certificate installation problem

Posted by Info Olagos <in...@gmail.com>.
The error i get is:

java.io.IOException: toDerInputStream rejects tag type 45.

regards,
Heidi

2011/3/13 Info Olagos <in...@gmail.com>

> Hello,
>
> I have a problem on the "sslprotocol" parameter in the ofbizcontainer.xml
> file in ofbiz release09.04.
> So my catalina webserver is not starting because of this "protocol" error
> after installing a certificate for ssl.
>
> Can anyone check my parameters in this part of the file.
>
>
> <!-- SSL connector attributes -->
>
> <property name="sSLImplementation"
> value="org.ofbiz.catalina.container.SSLImpl"/>
>
> <property name="algorithm" value="RSA"/>
>
> <!-- the clientAuth to "want" in order to receive certs from the client;
>
> note that this isn't set this way by default because with certain browsers
>
> (like Safari) it breaks access via HTTPS, so until that problem is fixed
>
> the default will be false -->
>
> <property name="clientAuth" value="false"/>
>
> <property name="keystoreFile" value="framework/base/config/cert.txt"/>
>
> <property name="keystorePass" value="*******"/>
>
> <property name="keystoreType" value="PKCS12"/>
>
> <property name="sslProtocol" value="TLS"/>
>
> <property name="ciphers" value=""/>
>
>
> Thanks for helping me.,
>
> Heidi
>
>
> --
> Olagos bvba
> http://www.olagos.eu <http://www.olagos.eu/>
> http://www.olagos.com
> http://www.olagos.be
> http://www.olagos.nl
> Olagos team
> Heesterbos 5
> 2570 Duffel
> Belgium
>
>
>
>


-- 
Olagos bvba
http://www.olagos.eu <http://www.olagos.eu/>
http://www.olagos.com
http://www.olagos.be
http://www.olagos.nl
Olagos team
Heesterbos 5
2570 Duffel
Belgium