tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From jean-frederic clere <jfrederic.cl...@fujitsu-siemens.com>
Subject Re: Status of Cert handling in Tomcat 3.3
Date Wed, 19 Sep 2001 13:32:01 GMT
Larry Isaacs wrote:
> 
> Hi,
> 
> With the latest source and the attached patch from Nacho,
> isapi_redirect.dll is able to pass the certificate to
> Tomcat.  However, when I try it out on Win2k and IIS5.0
> I get the following exception displayed:
> 
> Ajp13: Certificate convertion failed
> java.security.cert.CertificateException: Unable to initialize,
> java.io.IOException: DerInputStream.getLength(): lengthTag=76, too big.
> 
> This comes from the:
> 
>     X509Certificate cert = (X509Certificate)
>             cf.generateCertificate(bais);
> 
> call now found in o.a.t.util.compat.Jdk12Support.getX509Certificates().
> 
> I haven't tried this with Apache and mod_jk.  Is that combination
> working for others?
> 
> Any clues or suggestions how to pursue this problem would
> be appreciated.

Could you print the certificate before the
memcpy(huge_buf,s->ssl_cert,cc.CertContext.cbCertEncoded);?
- That is just  to have a hint of what is inside -

> Cheers,
> Larry Isaacs
> 
>   --------------------------------------------------------------------------------
> 
>    jk_isapi_plugin.c.diffName: jk_isapi_plugin.c.diff
>                          Type: diff files (text/plain)
> 
>                         Name: isapi_results.txt
>    isapi_results.txt    Type: diff files (text/plain)
>                     Encoding: quoted-printable

Mime
View raw message