tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Filip Hanik - Dev Lists <devli...@hanik.com>
Subject Re: Tomcat and OCSP
Date Fri, 08 Dec 2006 20:47:45 GMT
I would imagine that should be automatic,
you just configure the responder URL for your JVM

http://java.sun.com/j2se/1.5.0/docs/guide/security/pki-tiger.html#OCSP

Filip

Yoav Shapira wrote:
> Hi,
> Wouldn't you need OCSP revocation handling at the SSL connector
> processing point?  That's the patch I was thinking of, but I'm not an
> expert in this area, so I might be off-base.
>
> Yoav
>
> On 12/8/06, Filip Hanik - Dev Lists <devlists@hanik.com> wrote:
>> is a patch even required? or is OSCP something you just turn on since
>> its built into the JDK
>> Mark, do you have anymore details what this would involve?
>> Filip
>>
>> Yoav Shapira wrote:
>> > Mark,
>> > If you submit a patch for OCSP support, I'll gladly review it, and I
>> > imagine several other people would be interested as well.
>> >
>> > Yoav
>> >
>> > On 12/8/06, Mark Claassen <mclaassen@ocie.net> wrote:
>> >> I asked this on the user list, but perhaps this is a question 
>> better for
>> >> here.  I have been using Tomcat for a while, but have not been
>> >> developing
>> >> yet really (although I did submit a patch a while ago to the
>> >> CGIServlet).
>> >> However, this OCSP issue has potential to really hit the fan for us
>> >> and if
>> >> there is something that needs to be done, I would like to try.
>> >>
>> >> -----Original Message-----
>> >>
>> >> Now that I see Tomcat 6.0 is on it's way, I was wondering if OCSP is
>> >> going
>> >> to be included?  This is being required by more and more people these
>> >> days
>> >> (like the US government).
>> >>
>> >> If there are no plans to include it yet, how can this issue be
>> >> escalated?  I
>> >> see that OCSP support is bundled into the new JDKs, does this mean
>> >> that it
>> >> would not be too difficult for an enterprising (and desperate)
>> >> developer to
>> >> tackle?
>> >>
>> >> Mark
>> >>
>> >> -----Original Message-----
>> >> From: Velpi [mailto:velpi@industria.be]
>> >> Sent: Monday, July 31, 2006 4:33 AM
>> >> To: Tomcat Users List
>> >> Subject: Re: Tomcat and OCSP
>> >>
>> >> > Does the new support for OCSP in Java 5.0 have any impact on how
>> >> > certificates are handled in Tomcat?
>> >> > http://java.sun.com/j2se/1.5.0/docs/guide/security/pki-tiger.html
>> >> >
>> >> > It looks like it might just work if it is set up right in the java
>> >> > property files.  I checked the mailing list archives and found a 
>> few
>> >> > old references to OCSP, but nothing definitive.  Any guidance 
>> would be
>> >> greatly appreciated.
>> >>
>> >> I'm trying to set this up too. Did you get it up and running properly
>> >> yet?
>> >> (any
>> >> hints?)
>> >>
>> >>
>> >> -- Velpi
>> >>
>> >> ---------------------------------------------------------------------
>> >> To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe,
>> >> e-mail: users-unsubscribe@tomcat.apache.org
>> >> For additional commands, e-mail: users-help@tomcat.apache.org
>> >>
>> >>
>> >> ---------------------------------------------------------------------
>> >> To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe,
>> >> e-mail: users-unsubscribe@tomcat.apache.org
>> >> For additional commands, e-mail: users-help@tomcat.apache.org
>> >>
>> >>
>> >> ---------------------------------------------------------------------
>> >> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
>> >> For additional commands, e-mail: dev-help@tomcat.apache.org
>> >>
>> >>
>> >
>> > ---------------------------------------------------------------------
>> > To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
>> > For additional commands, e-mail: dev-help@tomcat.apache.org
>> >
>> >
>> >
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
>> For additional commands, e-mail: dev-help@tomcat.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: dev-help@tomcat.apache.org
>
>
>


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message