[prev in list] [next in list] [prev in thread] [next in thread] 

List:       tomcat-user
Subject:    Re: (MY Tomcat version :- 7.0.40 and deployed on CentOS
From:       Sushil Prusty <sushil.prusty () gmail ! com>
Date:       2013-08-30 8:50:46
Message-ID: CAOiha_oiGF3naeEJMH2YgF=yT__7=UwjQYmb=+HGdAteG5PN4A () mail ! gmail ! com
[Download RAW message or body]


Hi Chris

Thanks to show me a light in black dark room.
Please just look below work flow and requirement.


Before login to my web application, i need to swap data card to access my
web application. So data card  should be certified by OCSP instead CRL. My
java based web application is deployed on apache tomcat 7.0.40 ,so i think
i need to integrate OCSP some where in apache tomcat to certify my
application?
Or do you i need to write any external java program to interact with ocsp
responder ?

Is there any java api for provided by apache?


On Fri, Aug 30, 2013 at 12:34 AM, Christopher Schultz <
chris@christopherschultz.net> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> Sushil,
> 
> On 8/29/13 2:38 AM, Sushil Prusty wrote:
> > I need to configure OCSP in tomcat for my project and need to test
> > through client browser . I searched every where in all search
> > engine but unable to find out .
> > 
> > Please help out on How can we configure OCSP in tomcat.
> 
> The Tomcat native library must be built with OCSP support built-in or
> not (it's not runtime selectable). If you want to build with OCSP
> support, you'll want to use the "--enable-ocsp" switch when running
> "configure" before compiling.
> 
> Are you using a package managed by RedHat, or did you build tcnative
> yourself?
> 
> If you aren't using tcnative -- that is, you are using BIO or NIO
> connector -- you might just have to set a system property. See these
> references:
> 
> 
> http://security.stackexchange.com/questions/33451/does-javas-implementation-of-ocsp-and-crl-checking-handle-intermediate-cas
>  
> and
> 
> 
> http://docs.oracle.com/javase/7/docs/technotes/guides/security/certpath/CertPathProgGuide.html#AppC
>  
> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.14 (Darwin)
> Comment: GPGTools - http://gpgtools.org
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> 
> iQIcBAEBCAAGBQJSH5tLAAoJEBzwKT+lPKRYVkQP/2sVzBz76gK3NJMZ6BJfL9Vs
> DUycZGhVfLjZaV/scyYiQfUZkH8Fb6twUjvqMASysOMgeOhiKn3k5dLOvRb8Qc1N
> EPhCsHhgEL/wd2uii3NFX/qsNPi+gEX+Tq/IPNj01LX2RAvkhSdOZgUSmNAYWLP9
> RsT7I8KKJ44ddrntuIg518+qcBBsfAGW1BZiEp3rNEQzLTYOc8rJkoXRO6Ggjj65
> 78OtbaiQljW4/QhJ6KLvldOM+3WEuJTLGZBYW1FavFOVYEBVx/4P+FqFfKxs9Kvu
> s23psmTgjm604PCVCZDwGxNK+ncLOWjMLfpjbNFLw0/CUdEWsfLbKw6Q5OggKC6H
> Nsq9SRabpDH7oEqNZIWqTlLp3iuiKC8RsoFBz0C0XbgZv+0xWMqy7xtmzJAimSJe
> 50Fg/DRfSlpSmytnWwreVkZmvVlTc1FFyxo4WElD8b+GTFAsLeRAr0BxFrjI5UYw
> YTTQvVZivUg5ZnitnQDuEO36s0kV1AEkfPMoWl0A3C/IxDcSYbW454x0+hc69QhB
> 6RyQIgmA8wwkLAeiq1cA8fbmlSlVee4lqCkNCrD3OHDEBLoHArz3h0zd2Fsf0Woa
> lKZmPw14PSOw4P3AAtSbx/uRKtAobJrjzOviyKL5XvPeD/qQ6HXyK8JeXWhFLUyf
> FQ53mHbgx3/0KbVvMCjD
> =ebjb
> -----END PGP SIGNATURE-----
> 



[prev in list] [next in list] [prev in thread] [next in thread]