You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Randy Secrist <to...@secristfamily.com> on 2002/12/01 08:06:19 UTC

SSLPeerUnverifiedException?

I am getting a whole lot of these warnings in my stderr.log each time a client connects via SSL.  I have been using SSL since tomcat 3.x - and have never had any problems.  Since I recently switched to 4.1.12 - I am assuming this is a coyote related Http11Processor bug?

I have noticed that it does even after following the SSL config howto.  If the following is a meaningless error, it would be nice to shut it off so stderr.log doesn't grow so huge.

WARNING: Exception getting SSL attributes 
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
 at com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificateChain(DashoA6275)
 at org.apache.tomcat.util.net.JSSESupport.getPeerCertificateChain(JSSESupport.java:118)
 at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:543)
 at org.apache.coyote.Response.action(Response.java:216)
 at org.apache.coyote.tomcat4.CoyoteAdapter.postParseRequest(CoyoteAdapter.java:314)
 at org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java:221)
 at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:405)
 at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:380)
 at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:508)
 at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:533)
 at java.lang.Thread.run(Thread.java:536)


Randy

Re: SSLPeerUnverifiedException?

Posted by anywhere-info <an...@netscape.net>.
download tomcat-util from gump.covalent.com/jars/latest/tomcat-connector

Randy Secrist wrote:

>I am getting a whole lot of these warnings in my stderr.log each time a client connects via SSL.  I have been using SSL since tomcat 3.x - and have never had any problems.  Since I recently switched to 4.1.12 - I am assuming this is a coyote related Http11Processor bug?
>
>I have noticed that it does even after following the SSL config howto.  If the following is a meaningless error, it would be nice to shut it off so stderr.log doesn't grow so huge.
>
>WARNING: Exception getting SSL attributes 
>javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
> at com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificateChain(DashoA6275)
> at org.apache.tomcat.util.net.JSSESupport.getPeerCertificateChain(JSSESupport.java:118)
> at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:543)
> at org.apache.coyote.Response.action(Response.java:216)
> at org.apache.coyote.tomcat4.CoyoteAdapter.postParseRequest(CoyoteAdapter.java:314)
> at org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java:221)
> at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:405)
> at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:380)
> at org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:508)
> at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:533)
> at java.lang.Thread.run(Thread.java:536)
>
>
>Randy
>
>  
>

-- 
Your favorite stores, helpful shopping tools and great gift ideas. 
Experience the convenience of buying online with Shop@Netscape! 
http://shopnow.netscape.com/



--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


Re: SSLPeerUnverifiedException?

Posted by Uri Shohet <us...@ams-sys.com>.
>From 
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=13358

This is a warning which can be ignored (and has been removed). 4.1.13 will 
have
the fix.

HTH

On Sunday 01 December 2002 09:06, Randy Secrist wrote:
> I am getting a whole lot of these warnings in my stderr.log each time a
> client connects via SSL.  I have been using SSL since tomcat 3.x - and have
> never had any problems.  Since I recently switched to 4.1.12 - I am
> assuming this is a coyote related Http11Processor bug?
>
> I have noticed that it does even after following the SSL config howto.  If
> the following is a meaningless error, it would be nice to shut it off so
> stderr.log doesn't grow so huge.
>
> WARNING: Exception getting SSL attributes
> javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
>  at
> com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificateChain(DashoA6
>275) at
> org.apache.tomcat.util.net.JSSESupport.getPeerCertificateChain(JSSESupport.
>java:118) at
> org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:543)
> at org.apache.coyote.Response.action(Response.java:216)
>  at
> org.apache.coyote.tomcat4.CoyoteAdapter.postParseRequest(CoyoteAdapter.java
>:314) at
> org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.java:221) at
> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:405)
> at
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConn
>ection(Http11Protocol.java:380) at
> org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoint.java:508)
> at
> org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.ja
>va:533) at java.lang.Thread.run(Thread.java:536)
>
>
> Randy

-- 
Uri Shohet <ma...@ams-sys.com>
AMS Advanced Maintenance Systems Ltd.
Science Based Industry Campus
POB 23838, Jerusalem 91237,  Israel

Tel.        : +972-2-541-7449	Cell        : +972-54-259-850
Fax.        : +972-2-581-4448	US Toll-Free:  1-866-389-2001

Registered Linux User #166615 (http://counter.li.org)


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


Re: SSLPeerUnverifiedException?

Posted by Randy Secrist <to...@secristfamily.com>.
Well, now I know it isn't me.  Thanks!

Randy

----- Original Message -----
From: "mech" <me...@rz.fh-augsburg.de>
To: "'Tomcat Users List'" <to...@jakarta.apache.org>
Sent: Sunday, December 01, 2002 5:03 AM
Subject: RE: SSLPeerUnverifiedException?


> Check:
> http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14164
>
> Upgrade to 4.1.14+
>
> > -----Original Message-----
> > From: Randy Secrist [mailto:tomcat@secristfamily.com]
> > Sent: Sonntag, 1. Dezember 2002 08:06
> > To: Tomcat Users List
> > Subject: SSLPeerUnverifiedException?
> >
> >
> > I am getting a whole lot of these warnings in my stderr.log
> > each time a client connects via SSL.  I have been using SSL
> > since tomcat 3.x - and have never had any problems.  Since I
> > recently switched to 4.1.12 - I am assuming this is a coyote
> > related Http11Processor bug?
> >
> > I have noticed that it does even after following the SSL
> > config howto.  If the following is a meaningless error, it
> > would be nice to shut it off so stderr.log doesn't grow so huge.
> >
> > WARNING: Exception getting SSL attributes
> > javax.net.ssl.SSLPeerUnverifiedException: peer not
> > authenticated  at
> > com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificate
> > Chain(DashoA6275)
> >  at
> > org.apache.tomcat.util.net.JSSESupport.getPeerCertificateChain
> > (JSSESupport.java:118)
> >  at
> > org.apache.coyote.http11.Http11Processor.action(Http11Processo
> > r.java:543)
> >  at org.apache.coyote.Response.action(Response.java:216)
> >  at
> > org.apache.coyote.tomcat4.CoyoteAdapter.postParseRequest(Coyot
> > eAdapter.java:314)
> >  at
> > org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.
> > java:221)
> >  at
> > org.apache.coyote.http11.Http11Processor.process(Http11Process
> > or.java:405)
> >  at
> > org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandle
> > r.processConnection(Http11Protocol.java:380)
> >  at
> > org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoi
> > nt.java:508)
> >  at
> > org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(
> > ThreadPool.java:533)
> >  at java.lang.Thread.run(Thread.java:536)
> >
> >
> > Randy
> >
>
>
> --
> To unsubscribe, e-mail:
<ma...@jakarta.apache.org>
> For additional commands, e-mail:
<ma...@jakarta.apache.org>
>
>


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>


RE: SSLPeerUnverifiedException?

Posted by mech <me...@rz.fh-augsburg.de>.
Check:
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=14164

Upgrade to 4.1.14+

> -----Original Message-----
> From: Randy Secrist [mailto:tomcat@secristfamily.com] 
> Sent: Sonntag, 1. Dezember 2002 08:06
> To: Tomcat Users List
> Subject: SSLPeerUnverifiedException?
> 
> 
> I am getting a whole lot of these warnings in my stderr.log 
> each time a client connects via SSL.  I have been using SSL 
> since tomcat 3.x - and have never had any problems.  Since I 
> recently switched to 4.1.12 - I am assuming this is a coyote 
> related Http11Processor bug?
> 
> I have noticed that it does even after following the SSL 
> config howto.  If the following is a meaningless error, it 
> would be nice to shut it off so stderr.log doesn't grow so huge.
> 
> WARNING: Exception getting SSL attributes 
> javax.net.ssl.SSLPeerUnverifiedException: peer not 
> authenticated  at 
> com.sun.net.ssl.internal.ssl.SSLSessionImpl.getPeerCertificate
> Chain(DashoA6275)
>  at 
> org.apache.tomcat.util.net.JSSESupport.getPeerCertificateChain
> (JSSESupport.java:118)
>  at 
> org.apache.coyote.http11.Http11Processor.action(Http11Processo
> r.java:543)
>  at org.apache.coyote.Response.action(Response.java:216)
>  at 
> org.apache.coyote.tomcat4.CoyoteAdapter.postParseRequest(Coyot
> eAdapter.java:314)
>  at 
> org.apache.coyote.tomcat4.CoyoteAdapter.service(CoyoteAdapter.
> java:221)
>  at 
> org.apache.coyote.http11.Http11Processor.process(Http11Process
> or.java:405)
>  at 
> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandle
> r.processConnection(Http11Protocol.java:380)
>  at 
> org.apache.tomcat.util.net.TcpWorkerThread.runIt(PoolTcpEndpoi
> nt.java:508)
>  at 
> org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(
> ThreadPool.java:533)
>  at java.lang.Thread.run(Thread.java:536)
> 
> 
> Randy
> 


--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>