Mailing-List: contact tomcat-dev-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: tomcat-dev@jakarta.apache.org
Sender: jfclere@vtxrm2.bcn.fsc.net
Message-ID: <3BA89E51.4505AC36@fujitsu-siemens.com>
Date: Wed, 19 Sep 2001 15:32:01 +0200
From: jean-frederic clere <jfrederic.clere@fujitsu-siemens.com>
Reply-To: jfrederic.clere@fujitsu-siemens.com
MIME-Version: 1.0
To: tomcat-dev@jakarta.apache.org
Subject: Re: Status of Cert handling in Tomcat 3.3
References: <764CA2FF49EC054BA086FC8253A52DD7432C31@merc09.na.sas.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Larry Isaacs wrote:
> 
> Hi,
> 
> With the latest source and the attached patch from Nacho,
> isapi_redirect.dll is able to pass the certificate to
> Tomcat.  However, when I try it out on Win2k and IIS5.0
> I get the following exception displayed:
> 
> Ajp13: Certificate convertion failed
> java.security.cert.CertificateException: Unable to initialize,
> java.io.IOException: DerInputStream.getLength(): lengthTag=76, too big.
> 
> This comes from the:
> 
>     X509Certificate cert = (X509Certificate)
>             cf.generateCertificate(bais);
> 
> call now found in o.a.t.util.compat.Jdk12Support.getX509Certificates().
> 
> I haven't tried this with Apache and mod_jk.  Is that combination
> working for others?
> 
> Any clues or suggestions how to pursue this problem would
> be appreciated.

Could you print the certificate before the
memcpy(huge_buf,s->ssl_cert,cc.CertContext.cbCertEncoded);?
- That is just  to have a hint of what is inside -

> Cheers,
> Larry Isaacs
> 
>   --------------------------------------------------------------------------------
> 
>    jk_isapi_plugin.c.diffName: jk_isapi_plugin.c.diff
>                          Type: diff files (text/plain)
> 
>                         Name: isapi_results.txt
>    isapi_results.txt    Type: diff files (text/plain)
>                     Encoding: quoted-printable