You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by ru...@albany.edu on 2003/11/15 00:54:56 UTC
SSL on AIX: Tomcat fails to start
Hi:
Tomcat newbie running:
Tomcat 4.1.27 on AIX 5.2 ML1, IBM's 131 JDK, and Sun's JSSE package.
JSSE_HOME is set to the location of Sun's JSSE jars
Keystore is created and server.xml adjusted accordingly (using self-signed
cert for now).
Lines in java.security (which only sysadmin has access to) looks like:
security.provider.1=sun.security.provider.Sun
security.provider.2=com.ibm.crypto.provider.IBMJCA
security.provider.3=com.sun.net.ssl.internal.ssl.Provider
security.provider.4=com.sun.rsajca.Provider
security.provider.5=com.sun.crypto.provider.SunJCE
security.provider.6=sun.security.jgss.SunProvider
Receive the following error on startup attempt:
java.lang.reflect.InvocationTargetException: java.lang.NoSuchMethodError:
java.security.cert.X509Certificate: method
getSubjectX500Principal()Ljavax/security/auth/x500/X500Principal; not
found at
com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275(Inlined
Compiled Code)) at [MORE...]
Do I need to have the sys admin re-order the security providers so that
IBM's provider is last?
Or, do I have to use IBM's JSSE package? I read in the archives that
earlier Tomcat versions require Sun's JSSE(?).
Hoping somebody can give me a clue before I ask the sys admin to edit the
java.security file again...
Just want to add that this worked fine when I tried it under Red Hat
8 so I'm fairly certain this is an IBM / Sun package problem.
Regards,
|----------------------------------|
| Ryan Russo |
| russo@[SPAMaway].albany.edu |
| University at Albany--Computing |
| Technical Services Web Team |
|__________________________________|
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
Re: SSL on AIX: Tomcat fails to start
Posted by ru...@albany.edu.
Resolved:
After having our sys. admin. re-order the providers I was still
encountering the error.
I ended up placing Sun's jsse.jar, jcert.jar, and jnet.jar in
$tomcatHome/common/lib
Tomcat seemed to be ignoring JSSE_HOME. With JSSE jars in common/lib,
Tomcat does not seem to need JSSE_HOME as it is not set anywhere.
Additionally, removed all paths to JSSE jars from CLASSPATH variable
within $tomcatHome/bin/setclasspath.sh
By some evil twist of fate (all my fault) I neglected to move jnet.jar
into common/lib on my attempts prior to submitting to the Tomcat list.
Side Note: IBM's JSSE is not installed since we are using 131. On my
Linux box I was using JDK 1.4 which came package with JSSE.
-Ryan
> Hi:
> Tomcat newbie running:
> Tomcat 4.1.27 on AIX 5.2 ML1, IBM's 131 JDK, and Sun's JSSE package.
>
> JSSE_HOME is set to the location of Sun's JSSE jars
>
> Keystore is created and server.xml adjusted accordingly (using self-signed
> cert for now).
>
> Lines in java.security (which only sysadmin has access to) looks like:
> security.provider.1=sun.security.provider.Sun
> security.provider.2=com.ibm.crypto.provider.IBMJCA
> security.provider.3=com.sun.net.ssl.internal.ssl.Provider
> security.provider.4=com.sun.rsajca.Provider
> security.provider.5=com.sun.crypto.provider.SunJCE
> security.provider.6=sun.security.jgss.SunProvider
>
> Receive the following error on startup attempt:
> java.lang.reflect.InvocationTargetException: java.lang.NoSuchMethodError:
> java.security.cert.X509Certificate: method
> getSubjectX500Principal()Ljavax/security/auth/x500/X500Principal; not
> found at
> com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.a(DashoA6275(Inlined
> Compiled Code)) at [MORE...]
>
>
> Do I need to have the sys admin re-order the security providers so that
> IBM's provider is last?
> Or, do I have to use IBM's JSSE package? I read in the archives that
> earlier Tomcat versions require Sun's JSSE(?).
>
> Hoping somebody can give me a clue before I ask the sys admin to edit the
> java.security file again...
>
> Just want to add that this worked fine when I tried it under Red Hat
> 8 so I'm fairly certain this is an IBM / Sun package problem.
>
> Regards,
> |----------------------------------|
> | Ryan Russo |
> | russo@[SPAMaway].albany.edu |
> | University at Albany--Computing |
> | Technical Services Web Team |
> |__________________________________|
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>
|----------------------------------|
| Ryan Russo |
| russo@[SPAMaway].albany.edu |
| University at Albany--Computing |
| Technical Services Web Team |
|__________________________________|
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org