Re: Secure Jini and Tomcat

Jeff Hyatt-Steel wrote:

> Any idea would be appreciated.

Hi Jeff,

Did you try running Tomcat with logging set to FINER/FINEST for the
logger net.jini.jeri.ssl.client and what was the outcome of that.

Also you talk about configuring security related stuff through
server.xml, the JTSK based implementation is configured through system
properties as mentioned in
http://java.sun.com/products/jini/2.1/doc/api/net/jini/jeri/ssl/package-summary.html.
Could it be possible the configuration of certificates used for trust
verification by Tomcat results in a different view as the view of
secure Jini ERI, i.e. they are using a different certificate store.

Something else you might try is to set a breakpoint at line 141 of
net.jini.jeri.ssl.FilterX509TrustManager (JTSK 2.1) and inspect the
trustmanager factory with a debugger to see which keystore it uses for
trust related questions.

Also you could set a breakpoint at line 99 of the same class to see the
certificate chain being validated as I don't think for secure Jini ERI
you can get that information out by just configuring logging.
--
Mark

===========================================================================
To unsubscribe, send email to [email protected] and include in the body
of the message "signoff JAVASPACES-USERS".  For general help, send email to
[email protected] and include in the body of the message "help".

To view past JAVASPACES-USERS postings, please see:
http://archives.java.sun.com/archives/javaspaces-users.html