[jira] Commented: (GERONIMO-3864) Security warning about installation a certificate from a CA claiming to represent: Me

["Rustam Abdullaev (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GERONIMO-3864?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12589578#action_12589578 ] 

Rustam Abdullaev commented on GERONIMO-3864:
--------------------------------------------

Happens for me as well, on every start. Java 1.6.0_01-b06. Geronimo/Tomcat 2.1.
Message is shown by CSRSS at:

"main" prio=6 tid=0x00397400 nid=0xa00 runnable [0x009de000..0x009dfe5c]
   java.lang.Thread.State: RUNNABLE
        at sun.security.mscapi.KeyStore.storeCertificate(Native Method)
        at sun.security.mscapi.KeyStore.access$300(KeyStore.java:41)
        at sun.security.mscapi.KeyStore$KeyEntry.setCertificateChain(KeyStore.java:153)
        at sun.security.mscapi.KeyStore.engineSetCertificateEntry(KeyStore.java:482)
        at sun.security.mscapi.KeyStore$ROOT.engineSetCertificateEntry(KeyStore.java:49)
        at java.security.KeyStore.setCertificateEntry(KeyStore.java:941)
        at org.apache.geronimo.crypto.KeystoreUtil.<clinit>(KeystoreUtil.java:105)
        at org.apache.geronimo.tomcat.TomcatManagerImpl.addSslConnectorAttributes(TomcatManagerImpl.java:450)
        at org.apache.geronimo.tomcat.TomcatManagerImpl.<clinit>(TomcatManagerImpl.java:101)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
        at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
        at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
        at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
        at org.apache.geronimo.gbean.runtime.GBeanInstance.createInstance(GBeanInstance.java:948)
        at org.apache.geronimo.gbean.runtime.GBeanInstanceState.attemptFullStart(GBeanInstanceState.java:268)
        at org.apache.geronimo.gbean.runtime.GBeanInstanceState.start(GBeanInstanceState.java:102)
        at org.apache.geronimo.gbean.runtime.GBeanInstanceState.startRecursive(GBeanInstanceState.java:124)
        at org.apache.geronimo.gbean.runtime.GBeanInstance.startRecursive(GBeanInstance.java:555)
        at org.apache.geronimo.kernel.basic.BasicKernel.startRecursiveGBean(BasicKernel.java:379)
        at org.apache.geronimo.kernel.config.ConfigurationUtil.startConfigurationGBeans(ConfigurationUtil.java:456)
        at org.apache.geronimo.kernel.config.KernelConfigurationManager.start(KernelConfigurationManager.java:187)
        at org.apache.geronimo.kernel.config.SimpleConfigurationManager.startConfiguration(SimpleConfigurationManager.java:534)
        - locked <0x031deed8> (a org.apache.geronimo.kernel.config.EditableKernelConfigurationManager)
        at sun.reflect.GeneratedMethodAccessor24.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at org.apache.geronimo.gbean.runtime.ReflectionMethodInvoker.invoke(ReflectionMethodInvoker.java:34)
        at org.apache.geronimo.gbean.runtime.GBeanOperation.invoke(GBeanOperation.java:124)
        at org.apache.geronimo.gbean.runtime.GBeanInstance.invoke(GBeanInstance.java:832)
        at org.apache.geronimo.gbean.runtime.RawInvoker.invoke(RawInvoker.java:57)
        at org.apache.geronimo.kernel.basic.RawOperationInvoker.invoke(RawOperationInvoker.java:35)
        at org.apache.geronimo.kernel.basic.ProxyMethodInterceptor.intercept(ProxyMethodInterceptor.java:96)
        at org.apache.geronimo.gbean.GBeanLifecycle$$EnhancerByCGLIB$$9dce2cbf.startConfiguration(<generated>)
        at org.apache.geronimo.system.main.EmbeddedDaemon.doStartup(EmbeddedDaemon.java:156)
        at org.apache.geronimo.system.main.EmbeddedDaemon.execute(EmbeddedDaemon.java:78)
        at org.apache.geronimo.kernel.util.MainConfigurationBootstrapper.main(MainConfigurationBootstrapper.java:45)
        at org.apache.geronimo.cli.AbstractCLI.executeMain(AbstractCLI.java:67)
        at org.apache.geronimo.cli.daemon.DaemonCLI.main(DaemonCLI.java:30)

> Security warning about installation a certificate from a CA claiming to represent: Me
> -------------------------------------------------------------------------------------
>
>                 Key: GERONIMO-3864
>                 URL: https://issues.apache.org/jira/browse/GERONIMO-3864
>             Project: Geronimo
>          Issue Type: Bug
>      Security Level: public(Regular issues) 
>          Components: startup/shutdown
>    Affects Versions: 2.1
>         Environment: C:\geronimo-tomcat6-javaee5-2.1 Mon 02/18/2008 23:53:25.17
> > ver
> Microsoft Windows XP [Version 5.1.2600]
> C:\geronimo-tomcat6-javaee5-2.1 Mon 02/18/2008 23:53:27.43
> > java -version
> java version "1.6.0_03"
> Java(TM) SE Runtime Environment (build 1.6.0_03-b05)
> Java HotSpot(TM) Client VM (build 1.6.0_03-b05, mixed mode, sharing)
> C:\geronimo-tomcat6-javaee5-2.1 Mon 02/18/2008 23:53:30.79
> > echo %JAVA_HOME%
> c:\apps\java6
>            Reporter: Jacek Laskowski
>         Attachments: screenshot-1.jpg
>
>
> When you start geronimo-tomcat6-javaee5-2.1 on Windows XP with Java SE 6 you'll get a security warning about installation a certificate from a CA claiming to represent: Me. It doesn't show up with geronimo-jetty6-javaee5-2.1.
> See the attachment.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.