From users-return-268732-archive-asf-public=cust-asf.ponee.io@tomcat.apache.org Tue Nov 12 09:29:20 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 3D723180656 for ; Tue, 12 Nov 2019 10:29:20 +0100 (CET) Received: (qmail 48313 invoked by uid 500); 12 Nov 2019 09:29:16 -0000 Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Users List" Delivered-To: mailing list users@tomcat.apache.org Received: (qmail 48298 invoked by uid 99); 12 Nov 2019 09:29:16 -0000 Received: from Unknown (HELO mailrelay1-lw-us.apache.org) (10.10.3.42) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 12 Nov 2019 09:29:16 +0000 Received: from [192.168.23.12] (host213-121-9-136.range213-121.btcentralplus.com [213.121.9.136]) by mailrelay1-lw-us.apache.org (ASF Mail Server at mailrelay1-lw-us.apache.org) with ESMTPSA id D224F1003 for ; Tue, 12 Nov 2019 09:29:15 +0000 (UTC) Subject: Re: TLS key management To: users@tomcat.apache.org References: From: Mark Thomas Openpgp: preference=signencrypt Autocrypt: addr=markt@apache.org; prefer-encrypt=mutual; keydata= mQINBEq0DukBEAD4jovHOPJDxoD+JnO1Go2kiwpgRULasGlrVKuSUdP6wzcaqWmXpqtOJKKw W2MQFQLmg7nQ9RjJwy3QCbKNDJQA/bwbQT1F7WzTCz2S6vxC4zxKck4t6RZBq2dJsYKF0CEh 6ZfY4dmKvhq+3istSoFRdHYoOPGWZpuRDqfZPdGm/m335/6KGH59oysn1NE7a2a+kZzjBSEg v23+l4Z1Rg7+fpz1JcdHSdC2Z+ZRxML25eVatRVz4yvDOZItqDURP24zWOodxgboldV6Y88C 3v/7KRR+1vklzkuA2FqF8Q4r/2f0su7MUVviQcy29y/RlLSDTTYoVlCZ1ni14qFU7Hpw43KJ tgXmcUwq31T1+SlXdYjNJ1aFkUi8BjCHDcSgE/IReKUanjHzm4XSymKDTeqqzidi4k6PDD4j yHb8k8vxi6qT6Udnlcfo5NBkkUT1TauhEy8ktHhbl9k60BvvMBP9l6cURiJg1WS77egI4P/8 2oPbzzFiGFqXyJKULVgxtdQ3JikCpodp3f1fh6PlYZwkW4xCJLJucJ5MiQp07HAkMVW5w+k8 Xvuk4i5quh3N+2kzKHOOiQCDmN0sz0XjOE+7XBvM1lvz3+UarLfgSVmW8aheLd7eaIl5ItBk 8844ZJ60LrQ+JiIqvqJemxyIM6epoZvY5a3ZshZpcLilC5hW8QARAQABtCJNYXJrIEUgRCBU aG9tYXMgPG1hcmt0QGFwYWNoZS5vcmc+iQI3BBMBCgAhBQJKtA7pAhsDBQsJCAcDBRUKCQgL BRYCAwEAAh4BAheAAAoJEBDAHFovYFnn2YgQAKN6FLG/I1Ij3PUlC/XNlhasQxPeE3w2Ovtt weOQPYkblJ9nHtGH5pNqG2/qoGShlpI04jJy9GxWKOo7NV4v7M0mbVlCXVgjdlvMFWdL7lno cggwJAFejQcYlVtxyhu4m50LBvBunEhxCbQcKnnWmkB7Ocm0Ictaqjc9rCc1F/aNhVMUpJ0z G1kyTp9hxvN6TbCQlacMx5ocTWzL0zn6QZhbUfrYwfxYJmSnkVYZOYzXIXIsLN5sJ9Q4P8tj Y4qWgd+bQvOqPWrkzL9LVRnGOrSYIsoM5zWdoj1g1glMzK/ZqJdRqqqBhe6FYTbXipz8oX8i mCebcaxZnfLhGiqqX+yDa3YUwDiqom+sZOc0iXGvKkqltPLpNeF0MVT7aZjalsQ/v2Ysb24R Ql9FfjfWmvT8ZPWz8Kore1AI4UcIIgFVtM+zuLlL9CIsGjg+gHDE2dhZDY0qfizlHL9CoAWU DM3pIfxM2V4BRn1xO+j/mModhjmYLZvnFVz4KGkNO7wRkofAANIWYo3WI5x83BGDH371t3NR rrpSSFP0XpQX6/Leaj2j6U6puABL2qBxhscsO6chc3u4/+019ff+peZVsc9ttcTQXsKIujmM b8p2sk5usmv6PKVX3oW/RAxpbVHU5kZ5px1Hq7mMQdZfLs5ff4YymXBH02z4/RmSzPam0Xb5 uQINBEq0DukBEADCNEkws5YroBmbu8789Xf006gTl5LzD/Hdt3sAp9iCfPgucO+l7U+xbo1X HTMJQwEVfS+Rx3RbaLYRG+hU7FuJLQB/5NaCDNRuqw5KHyQtJUH+zo84IqqfMzG8aOSdHg1y r2xKH4QTmgQONBu/W0xEZmZro6TjYNwkk2pwXK2yuImZPUOy+mK1qF8Wm3hTtkPE+FFSNFIa eHDoTGmx/0Riu/K7dNJTrC0TlRpn2K6d60zB53YYTc+0DYSDyB0FupXiAx/+XEGn3Q7eNi2B V6w50v5r51QP8zptiFflMfFKNAfV8xS5MteQd98YS5qqd/LPo3gS5HFPQaSL0k3RTClv7fQN HcZFqmv0OWpix6zm2npYxhqsTDGeSa52/uXehVXF5JubYFifMSLpbGVZqdrmG5hr2cycxsjF iY0zJOaRitmN/JWbOGLiwrcN4ukKNyFntFG5jPaFnJdx9rHfyJNeF9cgv9JlZeFxJ6WqIAhl KOuH3K8/py0SPE6ZOFfRo0YUxvh25K/siOcPLm613aOxyY7YfQ8ME2vgn7I0mAtg9am+YFDa bGqj839odwZdzZv2T2mUHnybFTJFBuMWGWKYstYDS6eZEmhupbPvUKkDug/mO+gdo+pSKF9Y S6DM5RtCdTNJq4NZY50ypBb5RSj+INHPocIp2V/DDTbzySsu6wARAQABiQIfBBgBCgAJBQJK tA7pAhsMAAoJEBDAHFovYFnnLe0P/i34oK5cE2LlqUEITEcTO94x1EX0UmtKokRfQ3AYWK8X eFD8cmSty72hMkL+1c0V//4Qc53SUyLIWXk8FKWF7hdL3zyuBqlRb55721CYC35GA/jR90p0 k1vr701gaat2cNTOVC0/6H9cE5yYXT+zMr9TSiKCDwONhhSbmAJZc6X0fgsmCD7I5xUI5Vri hN/Wx0CZBtrXGUyE4hgFaYSGptZmkY5Ln1e+nI185Bda7bpLwcAIGrI9nYtVXgf71ybGKdPP tFfXIoPXuctn99M7NnWBhNuGDms2YWkOC7eeWBTxKkZDWR3vRmRy52B6GxR7USk/KXs7yqGP kfT/c4CZFfOurZUXXuC3PvOme0DQmqwExtJormoG4Fy6suEFPrfhYMigTy7kSbVTCOBMjQLH +U/FFNshvg9+M/ZvaKT+0lpRvBSuG5ngsC0bO0xWsXhb6qfH2h53g4VcwFvCBL5IfqgAeUbC nGGHNcGWpmwdeb7D7ahrNZSHEUUYR7lTbjkYS01/QDOcEwNZOqDRIJUQOOUq35721VeROkdh ZmMZtFlsQeQJsWoqGrQo/kEYicVlMVOgjmOOzOa5fRb/IqlGlBn4a4me3hWthLLtMy+OOEim 6ENjntVTBQiTP/YqrxWDbCkaD7b2e9wY5N3JlRxMIQHfcHaND3PRdQSn7oHYXmJl Message-ID: Date: Tue, 12 Nov 2019 09:29:14 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Language: en-GB Content-Transfer-Encoding: base64 T24gMTEvMTEvMjAxOSAyMzo0MCwgR2VvcmdlIFN0YW5jaGV2IHdyb3RlOg0KPiBDdXJyZW50 bHksIChpbiBtb3N0IGNhc2VzKSBUb21jYXQgY3JlYXRlcyBhbiBpbi1tZW1vcnkga2V5c3Rv cmUgYW5kIGluaXRpYWxpemVzIGttZiBhcyBmb2xsb3dzOiBLZXlNYW5hZ2VtZW50RmFjdG9y eS5nZXRJbnN0YW5jZShhbGdvKS5pbml0KGtleXN0b3JlLCBrc3Bhc3MpLiBUaGUgaW4tbWVt b3J5IGtleXN0b3JlIGhhcyB0aGUga2V5LCB0aGUgY2VydGlmaWNhdGUgYW5kIHRoZSBjaGFp biBhbmQgbm90aGluZyBlbHNlLiBUaGlzIHdvcmtzIGZpbmUgaW4gbW9zdCBjYXNlcyBidXQg d2UndmUgcmFuIGludG8gYSBzaXR1YXRpb24gd2hlcmUgdGhpcyBpcyBub3Qgc3VmZmljaWVu dC4gSSBhbSBydW5uaW5nIFRDIHdpdGggQkMgYXMgSlNTRSBwcm92aWRlciBpbiBGSVBTLWFw cHJvdmVkIG9ubHkgbW9kZSBhbmQgaW4gY2VydGFpbiB1c2UgY2FzZXMgd2UncmUgcnVubmlu ZyBpbnRvIGlzc3VlcyB3aXRoIFJTQSBrZXkgcmV1c2UuIEZJUFMgc3RhdGVzIHRoYXQgYW4g UlNBIGtleSBzaG91bGQgYmUgdXNlZCBmb3IgZW5jcnlwdGlvbi9kZWNyeXB0aW9uIG9yIGZv ciBzaWduYXR1cmUvdmVyaWZpY2F0aW9uIGJ1dCBub3QgZm9yIGJvdGguIFNvIHdoZW4gb25l IGJyb3dzZXIgKGluIG91ciBjYXNlIGl0IHdhcyBGRikgc2VsZWN0cyBUTFNfRUNESEVfUlNB X1dJVEhfQUVTXzEyOF9HQ01fU0hBMjU2LCBCQydzIGtleSBtYW5hZ2VyIG1hcmtzIGFuZCBy ZW1lbWJlcnMgdGhlIGtleSB1c2FnZSwgdGhlbiBhbm90aGVyIGJyb3dzZXIgKENocm9tZSkg c2V0dGxlcyBmb3IgVExTX1JTQV9XSVRIX0FFU18xMjhfR0NNX1NIQTI1NiBCQyB0aHJvd3Mg YW4ga2V5LXJldXNlIGV4Y2VwdGlvbiBzaW5jZSB0aGUgbGF0dGVyIHN1aXRlIHVzZXMgUlNB IGZvciBrZXkgZXhjaGFuZ2UgYW5kIHRoZSBmb3JtZXIgZm9yIGF1dGhlbnRpY2F0aW9uLiBU aGUgQkMga2V5IG1hbmFnZXIgaGFzIHRoZSBhYmlsaXR5IHRvIHNlbGVjdCBhIGRpZmZlcmVu dCBrZXkgYmFzZWQgb24gS2V5VXNhZ2UgZXh0ZW5zaW9uLCBzbyBpdCBpcyBwb3NzaWJsZSB0 byBoYXZlIG11bHRpcGxlIFJTQSBrZXlzIGluIG1lbW9yeSB0aGF0IHdvdWxkIGJlIHVzZWQg YWNjb3JkaW5nIHRvIHRoZWlyIGNlcnRpZmljYXRlcyBLZXlVc2FnZSBwb2xpY3kuIEhvd2V2 ZXIgVEMgZmVlZHMgb25seSBvbmUgY2VydGlmaWNhdGUgdG8gdGhlIEtNLg0KPiANCj4gSGVy ZSBpcyBhIHRocmVhZCBbMV0gdGhhdCBJIHJhbiBpbnRvIHRoYXQgc2hvd3Mgc29tZW9uZSBl bHNlIHJ1bm5pbmcgaW50byB0aGUgaXNzdWUgYW5kIHJlc3BvbnNlIGZyb20gQkMgZGV2ZWxv cGVyLg0KPiANCj4gVG8gYmUgZmFpciwgQkNGSVBTIGRvZXMgaGF2ZSBhIC1EIG92ZXJyaWRl IGZvciB0aGUga2V5IHVzYWdlIG92ZXJyaWRlIGZvciBSU0Ega2V5cyBpbiBhcHByb3ZlZC1v bmx5IG1vZGUgYnV0IGFjY29yZGluZyB0byB0aGlzIHRocmVhZCBbMl0sIHRoZSBwcm9wZXJ0 eSBpcyB0aGVyZSBmb3IgY29tcGxldGVseSBkaWZmZXJlbnQgcHVycG9zZSBhbmQgcnVubmlu ZyBpdCB0byBnZXQgYXJvdW5kIHRoZSBUQyBpc3N1ZSBpcyBub3QgRklQUyBjb21wbGlhbnQu DQo+IA0KPiBTbyBoYXZpbmcgbG9va2VkIGF0IHRoZSBjb2RlIGluIFNTTFV0aWxCYXNlI2dl dEtleU1hbmFnZXJzKCksIGlzIGl0IHdvcnRoIG9wZW5pbmcgYSBCWiByZXF1ZXN0IHRvIGhh dmUgc29tZSBzb2x1dGlvbiB0byB0aGlzIGlzc3VlIC0gcGVyaGFwcyBpZiBhbGlhcyBpcyBv bWl0dGVkIGluIGNvbmZpZ3VyYXRpb24gYW5kIHRoZSBrZXlzdG9yZSBpcyBvZiB0cmFuc2Zl cnJhYmxlIHR5cGUgKG5vdCBtcywgaGFyZHdhcmUsIGV0YykgdGhlbiB0cmFuc2ZlciBhbGwg ZW50cmllcyB0byB0aGUgS00gYW5kIGxldCBpdCBkbyB0aGUgc2VsZWN0aW9uPw0KDQpBYnNv bHV0ZWx5Lg0KDQpJZiB5b3UgY2FuIHByb3ZpZGUgZXZlcnl0aGluZyB3ZSdsbCBuZWVkIHRv IHJlcHJvZHVjZSB0aGlzIG9uIGEgY2xlYW4NCjkuMC54IGJ1aWxkIChzZXJ2ZXIueG1sIGNo YW5nZXMsIHNhbXBsZSBrZXlzdG9yZXMsIGxpbmtzIHRvIGxpYnMgd2UgbmVlZA0KdG8gZG93 bmxvYWQgZXRjLikgaXQgc2hvdWxkIGJlIHBvc3NpYmxlIHRvIGFkZHJlc3MgdGhpcy4NCg0K TWFyaw0K DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NClRvIHVuc3Vic2NyaWJlLCBlLW1haWw6IHVzZXJzLXVuc3Vi c2NyaWJlQHRvbWNhdC5hcGFjaGUub3JnDQpGb3IgYWRkaXRpb25hbCBjb21tYW5kcywgZS1t YWlsOiB1c2Vycy1oZWxwQHRvbWNhdC5hcGFjaGUub3JnDQoN