Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (asf.osuosl.org: domain of jack.godau@gmail.com designates
 64.233.162.200 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
        s=beta; d=gmail.com;
        h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition;
        b=FBFsC4yZPSv0QT0DifnHbkDnC7Ck/a+LxOB5U+WbDG0s7tHPerrTlImUvStgCSOET9KyMZP247FvCMmnDMLL7eXqYAO+b2YAbiw4leBgnA0phz/fFsnPFfbjvLrbD0aufWfRScYIsY9oZVR76FdHfkyTdEw3rTB61Hc9bM0ZB3I=
Message-ID: <bdea7920605050731w493e4d68r464887bf7fdf4d1a@mail.gmail.com>
Date: Fri, 5 May 2006 16:31:38 +0200
From: Jack <jack.godau@gmail.com>
To: users@tomcat.apache.org
Subject: Tomcat and CRL(s) Certification Revocation Lists
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Hi,

I have already gotten Tomcat to work with a (single) CRL, and as it
was a bit of a struggle have placed some info for those trying to do
this at [1]. The document is far from perfect, and any comments are
welcome.

Now to the questions:
1. Is it possible to swap out the CRL (ie overwrite it with a newer
one) and have the changes picked up without a restart?

1.a. if a restart is needed is it enough to restart Tomcat or jboss be
restarted?


2. Is it possible to use multiple CRLs (by pointing at a directory for exam=
ple)?

2.a. if so would changes to this directory be dynamically read?

2.b. if not where is a good place (for me) to start looking at how to
implement this?


I would like to somehow have dynamic CRL loading (so something that
can do this without restarting either jboss or tomcat). I am not picky
as to it being a single CRL or a directory of same.

--
Cheers
Jack...

The claim "natural" is not synonymous with safe.


[1] http://jack.godau.googlepages.com/jbosscertificatesandopenssl

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org