HTTP TLS/SSL "Exception getting SSL Cert"

[saucier]

I'm using JBoss 4.0.2.
I'd like to use SSL/TLS with mutual client-server certificate authentication.

I set up a connector in tomcat's server.xml to listen on port 8443. (Note that the Tomcat docs state that sslProtocol="TLS" is the default but I had to specify it explicitly in order to have my connector use TLS.

I specified clientAuth="false" in the connector configuration, because I don't want to require client certificate authentication for everything running on the server. The tomcat documentation indicates that in this situation, if a web.xml specifies an auth-method of CLIENT-CERT that it will still request client certificate. I assume it accomplishes this through ssl renegotiation. This does not seem to be happening.

When I connect to a web application that specifies an auth-constraint of CLIENT-CERT, the connection is dropped and the server log shows the following:

15:27:48,117 INFO [JSSE14Support] SSL Error getting client Certs
javax.net.ssl.SSLHandshakeException: null cert chain
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1476)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:174)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:164)
at com.sun.net.ssl.internal.ssl.ServerHandshaker.clientCertificate(ServerHandshaker.java:1069)
at com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:187)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:433)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:815)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:677)
at com.sun.net.ssl.internal.ssl.AppInputStream.read(AppInputStream.java:75)
at java.io.InputStream.read(InputStream.java:89)
at org.apache.tomcat.util.net.jsse.JSSE14Support.synchronousHandshake(JSSE14Support.java:87)
at org.apache.tomcat.util.net.jsse.JSSE14Support.handShake(JSSE14Support.java:66)
at org.apache.tomcat.util.net.jsse.JSSESupport.getPeerCertificateChain(JSSESupport.java:120)
at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:1106)
at org.apache.coyote.Request.action(Request.java:363)
at org.apache.catalina.authenticator.SSLAuthenticator.authenticate(SSLAuthenticator.java:134)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:446)
at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:59)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744)
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)
15:27:48,123 WARN [Http11Processor] Exception getting SSL Cert
javax.net.ssl.SSLHandshakeException: null cert chain
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1476)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:174)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:164)
at com.sun.net.ssl.internal.ssl.ServerHandshaker.clientCertificate(ServerHandshaker.java:1069)
at com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:187)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:433)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:815)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:677)
at com.sun.net.ssl.internal.ssl.AppInputStream.read(AppInputStream.java:75)
at java.io.InputStream.read(InputStream.java:89)
at org.apache.tomcat.util.net.jsse.JSSE14Support.synchronousHandshake(JSSE14Support.java:87)
at org.apache.tomcat.util.net.jsse.JSSE14Support.handShake(JSSE14Support.java:66)
at org.apache.tomcat.util.net.jsse.JSSESupport.getPeerCertificateChain(JSSESupport.java:120)
at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:1106)
at org.apache.coyote.Request.action(Request.java:363)
at org.apache.catalina.authenticator.SSLAuthenticator.authenticate(SSLAuthenticator.java:134)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:446)
at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:59)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744)
at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
at java.lang.Thread.run(Thread.java:595)


which is what I would expect, since the browser I am using (Firefox 1.0.6) never asks me to choose a certificate (it seems to work as expected for other sites, and when deploying the same web application to WebLogic Server 8.1.

If I change my tomcat connector configuration to specify clientAuth="want" instead of printing an error to the server logs, the browser is returned a HTTP error code 400 and states that no client certificate was provided (which again is expected because the browser didn't ask me to specify a certificate).

The only way that I can get CLIENT-CERT authentication to work is if I specify clientAuth="true" in the tomcat server.xml and that is really not what I want.

It seems that ssl is not renegotiating with the client to request a certificate when it encounters the CLIENT-CERT auth-constraint. How can I solve this problem?

Thanks,
Stephen Saucier

[saucier]

To answer my own question,

if you specify a truststoreFile attribute in the tomcat connector configuration, the clientAuth attribute works as intended. In retrospect I suppose the behavior I was seeing shouldn't have been totally unexpected, but it still doesn't really seem to point towards the proper solution.

I should think it should still request the client certificate, and then always fail, saying the certificate is not trusted (or work as intended if the client cert is issued by a JDK/JSSE cacert).

Is there any way to tell tomcat to not validate the certificate (similar to specifying org.jboss.security.auth.certs.AnyCertVerifier as the verifier module-option for the org.jboss.security.auth.spi.BaseCertLoginModule)? I guess this would cause unexpected behavior for the AnyCertVerifier since it is relying on the transport layer to perform authentication.

Thanks,
Stephen Saucier

[bhasin_vikas1]

I'm using jboss 3.2.3
I am deploying the ssl but https didn't work.

I am connecting to the server and i have register the certificate of ssl.keystore and open the connection port of https but it didn't work. After connecting the server log shows the following:


12:15:23,874 INFO [Server] Starting JBoss (MX MicroKernel)...
12:15:23,874 INFO [Server] Release ID: JBoss [WonderLand] 3.2.3 (build: CVSTag=JBoss_3_2_3 date=200311301445)
12:15:23,874 INFO [Server] Home Dir: D:\jboss-3.2.3
12:15:23,874 INFO [Server] Home URL: file:/D:/jboss-3.2.3/
12:15:23,874 INFO [Server] Library URL: file:/D:/jboss-3.2.3/lib/
12:15:23,874 INFO [Server] Patch URL: null
12:15:23,874 INFO [Server] Server Name: default
12:15:23,874 INFO [Server] Server Home Dir: D:\jboss-3.2.3\server\default
12:15:23,874 INFO [Server] Server Home URL: file:/D:/jboss-3.2.3/server/default/
12:15:23,874 INFO [Server] Server Data Dir: D:\jboss-3.2.3\server\default\data
12:15:23,874 INFO [Server] Server Temp Dir: D:\jboss-3.2.3\server\default\tmp
12:15:23,874 INFO [Server] Server Config URL: file:/D:/jboss-3.2.3/server/default/conf/
12:15:23,889 INFO [Server] Server Library URL: file:/D:/jboss-3.2.3/server/default/lib/
12:15:23,889 INFO [Server] Root Deployment Filename: jboss-service.xml
12:15:23,889 INFO [Server] Starting General Purpose Architecture (GPA)...
12:15:24,108 INFO [ServerInfo] Java version: 1.4.2_08,Sun Microsystems Inc.
12:15:24,108 INFO [ServerInfo] Java VM: Java HotSpot(TM) Client VM 1.4.2_08-b03,Sun Microsystems Inc.
12:15:24,108 INFO [ServerInfo] OS-System: Windows 2000 5.0,x86
12:15:24,155 INFO [ServiceController] Controller MBean online
12:15:24,264 INFO [MainDeployer] Started jboss.system:service=MainDeployer
12:15:24,342 INFO [MainDeployer] Adding deployer: org.jboss.deployment.JARDeployer@1a68ef9
12:15:24,342 INFO [JARDeployer] Started jboss.system:service=JARDeployer
12:15:24,374 INFO [MainDeployer] Adding deployer: org.jboss.deployment.SARDeployer@1e232b5
12:15:24,389 INFO [SARDeployer] Started jboss.system:service=ServiceDeployer
12:15:24,389 INFO [Server] Core system initialized
12:15:24,421 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/conf/jboss-service.xml
12:15:42,842 INFO [Log4jService$URLWatchTimerTask] Configuring from URL: resource:log4j.xml
12:15:43,186 INFO [AbstractDeploymentScanner$ScannerThread] Running
12:15:43,186 INFO [LocalJBossServerDomain] Started jboss.management.local:j2eeType=J2EEDomain,name=Manager
12:15:43,186 INFO [Log4jService] Started jboss.system:type=Log4jService,service=Logging
12:15:43,202 INFO [WebService] Started WebServer with address: 0.0.0.0:8083
12:15:43,202 INFO [WebService] Using RMI server codebase: http://CFTINT-006:8083/
12:15:43,202 INFO [WebService] Started jboss:service=WebService
12:15:43,217 INFO [NamingService] Starting jnp server
12:15:43,311 INFO [NamingService] Started jnpPort=1099, rmiPort=1098, backlog=50, bindAddress=/0.0.0.0, Client SocketFactory=null, Server SocketFactory=org.jboss.net.sockets.DefaultSocketFactory@ad093076
12:15:43,327 INFO [NamingService] Listening on port 1099
12:15:43,342 INFO [NamingService] Started jboss:service=Naming
12:15:43,342 INFO [JNDIView] Started jboss:service=JNDIView
12:15:43,342 INFO [SecurityConfig] Started jboss.security:service=SecurityConfig
12:15:43,405 INFO [XMLLoginConfig] Started jboss.security:service=XMLLoginConfig
12:15:43,421 INFO [JaasSecurityManagerService] Started jboss.security:service=JaasSecurityManager
12:15:43,467 INFO [TransactionManagerService] Started jboss:service=TransactionManager
12:15:43,514 INFO [JRMPInvoker] Started jboss:service=invoker,type=jrmp
12:15:43,577 INFO [JRMPProxyFactory] Started jboss:service=proxyFactory,target=ClientUserTransactionFactory
12:15:43,577 INFO [JRMPProxyFactory] Started jboss:service=proxyFactory,target=ClientUserTransaction
12:15:43,592 INFO [ClientUserTransactionService] Started jboss:service=ClientUserTransaction
12:15:43,592 INFO [LocalInvoker] Started jboss:service=invoker,type=local
12:15:43,624 INFO [PooledInvoker] Started jboss:service=invoker,type=pooled
12:15:43,639 INFO [MainDeployer] Adding deployer: org.jboss.ejb.EJBDeployer@1fac852
12:15:43,639 INFO [EJBDeployer] Started jboss.ejb:service=EJBDeployer
12:15:43,639 INFO [MainDeployer] Adding deployer: org.jboss.deployment.EARDeployer@15a94f
12:15:43,639 INFO [EARDeployer] Started jboss.j2ee:service=EARDeployer
12:15:43,671 INFO [MainDeployer] Adding deployer: org.jboss.varia.deployment.BeanShellSubDeployer@6e41b5
12:15:43,671 INFO [BeanShellSubDeployer] Started jboss.scripts:service=BSHDeployer
12:15:43,686 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/
12:15:43,702 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
12:15:43,717 INFO [MainDeployer] deployment waiting for deployer: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
12:15:43,842 INFO [HttpInvoker] Started jboss:service=invoker,type=http
12:15:43,842 INFO [HttpInvokerHA] Started jboss:service=invoker,type=httpHA
12:15:43,858 INFO [HttpProxyFactory] Started jboss:service=invoker,type=http,target=Naming
12:15:43,858 INFO [HttpProxyFactory] Started jboss:service=invoker,type=http,target=Naming,readonly=true
12:15:43,936 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/
12:15:44,202 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-jca.sar
12:15:44,905 INFO [XSLSubDeployer] Created templates: org.apache.xalan.templates.StylesheetRoot@3f265b
12:15:44,905 INFO [MainDeployer] Adding deployer: org.jboss.resource.RARDeployer@1ef3a22
12:15:44,905 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
12:15:44,905 INFO [MainDeployer] deployment waiting for deployer: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
12:15:44,905 INFO [MainDeployer] Deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/ is waiting for an appropriate deployer.
12:15:44,905 INFO [RARDeployer] Started jboss.jca:service=RARDeployer
12:15:44,905 INFO [MainDeployer] Adding deployer: org.jboss.deployment.XSLSubDeployer@511e0a
12:15:44,905 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
12:15:44,905 INFO [MainDeployer] deployment waiting for deployer: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
12:15:44,905 INFO [MainDeployer] Deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/ is waiting for an appropriate deployer.
12:15:44,921 INFO [XSLSubDeployer] Started jboss.jca:service=ConnectionFactoryDeployer
12:15:44,921 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-jca.sar
12:15:44,921 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/
12:15:44,936 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/ant.jar
12:15:46,577 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/bootstrap.jar
12:15:46,624 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/catalina.jar
12:15:48,358 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/commons-beanutils.jar
12:15:48,671 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/commons-collections.jar
12:15:49,327 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/commons-digester.jar
12:15:49,671 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/commons-logging.jar
12:15:49,780 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/jakarta-regexp-1.3.jar
12:15:49,842 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/jasper-compiler.jar
12:15:50,202 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/jasper-runtime.jar
12:15:50,389 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/naming-common.jar
12:15:50,499 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/naming-resources.jar
12:15:50,608 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/servlets-common.jar
12:15:50,671 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/servlets-default.jar
12:15:50,686 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/servlets-invoker.jar
12:15:50,717 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/servlets-webdav.jar
12:15:50,733 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat-coyote.jar
12:15:50,889 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat-http11.jar
12:15:51,014 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat-jk2.jar
12:15:51,186 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat-util.jar
12:15:51,671 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat41-service.jar
12:16:00,717 INFO [STDOUT] Apache Tomcat/4.1.29
12:16:00,889 INFO [Http11Protocol] Initializing Coyote HTTP/1.1 on port 8090
12:16:00,889 INFO [Engine] CoyoteConnector Coyote can't register jmx for protocol
12:16:00,921 INFO [Http11Protocol] Starting Coyote HTTP/1.1 on port 8090
12:16:01,046 INFO [Engine] CoyoteConnector Coyote can't register jmx for protocol
12:16:01,264 INFO [ChannelSocket] JK2: ajp13 listening on /0.0.0.0:8009
12:16:01,296 INFO [JkMain] Jk running ID=0 time=0/250 config=null
12:16:01,296 INFO [Engine] HttpConnector Opening server socket on host IP address 0.0.0.0
12:16:01,296 INFO [Engine] HttpConnector[3443] Starting background thread
12:16:01,483 INFO [Engine] HttpProcessor[3443][0] Starting background thread
12:16:01,483 INFO [Engine] HttpProcessor[3443][1] Starting background thread
12:16:01,483 INFO [Engine] HttpProcessor[3443][2] Starting background thread
12:16:01,483 INFO [Engine] HttpProcessor[3443][3] Starting background thread
12:16:01,499 INFO [Engine] HttpProcessor[3443][4] Starting background thread
12:16:01,499 INFO [EmbeddedTomcatService] OK
12:16:01,499 INFO [MainDeployer] Adding deployer: org.jboss.web.tomcat.tc4.EmbeddedTomcatService@14d659d
12:16:01,499 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
12:16:01,702 INFO [EmbeddedTomcatService] deploy, ctxPath=/invoker, warUrl=file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
12:16:02,421 INFO [Engine] SingleSignOnContextConfig[/invoker]: Added certificates -> request attribute Valve
12:16:02,499 INFO [Engine] SingleSignOnContextConfig[/invoker]: Configured an authenticator for method BASIC
12:16:02,514 WARN [EmbeddedTomcatService] Unable to invoke setDelegate on class loader:org.jboss.web.tomcat.tc4.WebCtxLoader$ENCLoader@1558dc
12:16:02,514 INFO [Engine] StandardManager[/invoker]: Seeding random number generator class java.security.SecureRandom
12:16:02,655 INFO [Engine] StandardManager[/invoker]: Seeding of random number generator has been completed
12:16:02,717 INFO [Engine] StandardWrapper[/invoker:default]: Loading container servlet default
12:16:02,780 INFO [Engine] StandardWrapper[/invoker:invoker]: Loading container servlet invoker
12:16:03,858 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
12:16:03,858 INFO [EmbeddedTomcatService] Started jboss.web:service=WebServer
12:16:03,874 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/
12:16:03,874 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-httpil.sar/
12:16:03,889 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-httpil.sar/jbossmq-httpil.war/
12:16:04,108 INFO [EmbeddedTomcatService] deploy, ctxPath=/jbossmq-httpil, warUrl=file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-httpil.sar/jbossmq-httpil.war/
12:16:04,389 INFO [Engine] SingleSignOnContextConfig[/jbossmq-httpil]: Added certificates -> request attribute Valve
12:16:04,389 INFO [Engine] SingleSignOnContextConfig[/jbossmq-httpil]: Configured an authenticator for method BASIC
12:16:04,421 WARN [EmbeddedTomcatService] Unable to invoke setDelegate on class loader:org.jboss.web.tomcat.tc4.WebCtxLoader$ENCLoader@b64f2e
12:16:04,421 INFO [Engine] StandardManager[/jbossmq-httpil]: Seeding random number generator class java.security.SecureRandom
12:16:04,421 INFO [Engine] StandardManager[/jbossmq-httpil]: Seeding of random number generator has been completed
12:16:04,421 INFO [Engine] StandardWrapper[/jbossmq-httpil:default]: Loading container servlet default
12:16:04,421 INFO [Engine] StandardWrapper[/jbossmq-httpil:invoker]: Loading container servlet invoker
12:16:04,780 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-httpil.sar/
12:16:04,780 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jmx-invoker-adaptor-server.sar/
12:16:04,952 INFO [JRMPProxyFactory] Started jboss.jmx:type=adaptor,name=Invoker,protocol=jrmp,service=proxyFactory
12:16:04,952 INFO [NamingAlias] Bound link jmx/rmi/RMIAdaptor to jmx/invoker/RMIAdaptor
12:16:04,952 INFO [NamingAlias] Started jboss.jmx:alias=jmx/rmi/RMIAdaptor
12:16:04,967 INFO [InvokerAdaptorService] Started jboss.jmx:type=adaptor,name=Invoker
12:16:04,983 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jmx-invoker-adaptor-server.sar/
12:16:08,296 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/management/console-mgr.sar
12:16:11,936 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7387console-mgr.sar-contents/console-mgr-classes.jar
12:16:12,780 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7387console-mgr.sar-contents/jcommon.jar
12:16:13,514 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7387console-mgr.sar-contents/jfreechart-demo.jar
12:16:14,952 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7387console-mgr.sar-contents/jfreechart.jar
12:16:15,389 INFO [PluginManager] Started jboss.admin:service=PluginManager
12:16:15,389 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/management/console-mgr.sar
12:16:15,405 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/snmp-adaptor.sar/
12:16:15,421 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/snmp-adaptor.sar/castor.jar
12:16:24,030 INFO [TrapdService] Started jboss.jmx:name=SnmpAgent,service=trapd,type=logger
12:16:24,030 INFO [SnmpAgentService] Instantiating trap emitter ...
12:16:24,061 INFO [SnmpAgentService] Starting trap emitter ...
12:16:24,061 INFO [TrapEmitter] Reading resource: "/managers.xml"
12:16:24,452 INFO [TrapEmitter] "/managers.xml" valid. Read 1 monitoring managers
12:16:24,452 INFO [TrapEmitter] Executing resource: "/managers.xml"
12:16:24,546 INFO [TrapFactorySupport] Reading resource: "/notifications.xml"
12:16:24,608 INFO [TrapFactorySupport] "/notifications.xml" valid. Read 2 mappings
12:16:24,608 INFO [TrapFactorySupport] Executing resource: "/notifications.xml"
12:16:24,671 INFO [TrapFactorySupport] Trap factory going active
12:16:24,671 INFO [SnmpAgentService] Instantiating subscription manager ...
12:16:24,671 INFO [SnmpAgentService] Starting subscription manager ...
12:16:24,671 INFO [SubscriptionMgr] Reading resource: "/mbeans.xml"
12:16:24,717 INFO [SubscriptionMgr] "/mbeans.xml" valid. Read 2 monitored objects
12:16:24,717 INFO [SubscriptionMgr] Executing resource: "/mbeans.xml"
12:16:24,717 INFO [SubscriptionMgr] Subscription manager done
12:16:24,733 INFO [SnmpAgentService] Starting heartbeat controller ...
12:16:24,733 WARN [Heartbeat] Heartbeat disabled
12:16:24,796 INFO [SnmpAgentService] Snmp Agent going active
12:16:24,796 INFO [SnmpAgentService] Started jboss.jmx:name=SnmpAgent,service=snmp,type=adaptor
12:16:24,811 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/snmp-adaptor.sar/
12:16:24,842 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/uuid-key-generator.sar
12:16:24,921 INFO [UUIDKeyGeneratorFactoryService] Started jboss:service=UUIDKeyGeneratorFactory
12:16:24,936 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/uuid-key-generator.sar
12:16:24,967 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-local-jdbc.rar
12:16:25,155 INFO [RARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7390jboss-local-jdbc.rar-contents/jboss-local-jdbc.jar
12:16:25,202 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-local-jdbc.rar
12:16:25,264 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-xa-jdbc.rar
12:16:25,405 INFO [RARMetaData] Loading JBoss Resource Adapter for JDBC 2 XA drivers
12:16:25,405 INFO [RARMetaData] Required license terms present. See deployment descriptor.
12:16:25,452 INFO [RARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7391jboss-xa-jdbc.rar-contents/jboss-xa-jdbc.jar
12:16:25,592 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-xa-jdbc.rar
12:16:25,686 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jms-ra.rar
12:16:25,936 INFO [RARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7392jms-ra.rar-contents/jms-ra.jar
12:16:25,983 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jms-ra.rar
12:16:25,983 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/hsqldb-ds.xml
12:16:26,202 INFO [RARDeployment] Started jboss.jca:service=ManagedConnectionFactory,name=DefaultDS
12:16:26,217 INFO [JBossManagedConnectionPool] Started jboss.jca:service=ManagedConnectionPool,name=DefaultDS
12:16:26,249 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/hsqldb-ds.xml
12:16:26,264 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jms-ds.xml
12:16:26,389 INFO [JMSProviderLoader] Bound adapter to java:/DefaultJMSProvider
12:16:26,389 INFO [JMSProviderLoader] Started jboss.mq:service=JMSProviderLoader,name=JBossMQProvider
12:16:26,389 INFO [ServerSessionPoolLoader] pool factory StdJMSPool bound to java:/StdJMSPool
12:16:26,389 INFO [ServerSessionPoolLoader] Started jboss.mq:service=ServerSessionPoolMBean,name=StdJMSPool
12:16:26,452 INFO [RARDeployment] Started jboss.jca:service=ManagedConnectionFactory,name=JmsXA
12:16:26,452 INFO [JBossManagedConnectionPool] Started jboss.jca:service=ManagedConnectionPool,name=JmsXA
12:16:26,467 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jms-ds.xml
12:16:26,483 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/cache-invalidation-service.xml
12:16:26,514 INFO [InvalidationManager] Starting Invalidation Manager jboss.cache:service=InvalidationManager
12:16:26,514 INFO [InvalidationManager] Started jboss.cache:service=InvalidationManager
12:16:26,530 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/cache-invalidation-service.xml
12:16:26,546 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/client-deployer-service.xml
12:16:26,592 INFO [MainDeployer] Adding deployer: org.jboss.deployment.ClientDeployer@1dba9f9
12:16:26,592 INFO [ClientDeployer] Started jboss.j2ee:service=ClientDeployer
12:16:26,608 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/client-deployer-service.xml
12:16:26,624 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/hsqldb-jdbc2-service.xml
12:16:26,764 INFO [MessageCache] Started jboss.mq:service=MessageCache
12:16:26,780 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/hsqldb-jdbc2-service.xml
12:16:26,796 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-destinations-service.xml
12:16:26,921 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-destinations-service.xml
12:16:26,936 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-service.xml
12:16:27,124 INFO [DynamicStateManager] Started jboss.mq:service=StateManager
12:16:27,139 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-service.xml
12:16:27,155 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jvm-il-service.xml
12:16:27,202 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jvm-il-service.xml
12:16:27,217 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/oil-service.xml
12:16:27,264 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/oil-service.xml
12:16:27,280 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/oil2-service.xml
12:16:27,311 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/oil2-service.xml
12:16:27,327 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/rmi-il-service.xml
12:16:27,374 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/rmi-il-service.xml
12:16:27,374 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/uil2-service.xml
12:16:27,452 INFO [NamingAlias] Bound link UILConnectionFactory to UIL2ConnectionFactory
12:16:27,452 INFO [NamingAlias] Started jboss.mq:service=InvocationLayer,type=UIL
12:16:27,452 INFO [NamingAlias] Bound link UILXAConnectionFactory to UIL2XAConnectionFactory
12:16:27,452 INFO [NamingAlias] Started jboss.mq:service=InvocationLayer,type=UILXA
12:16:27,467 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/uil2-service.xml
12:16:27,483 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/mail-service.xml
12:16:27,796 INFO [MailService] Mail Service bound to java:/Mail
12:16:27,796 INFO [MailService] Started jboss:service=Mail
12:16:27,811 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/mail-service.xml
12:16:27,827 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/properties-service.xml
12:16:27,874 INFO [PropertyEditorManagerService] Started jboss:type=Service,name=PropertyEditorManager
12:16:27,874 INFO [SystemPropertiesService] Started jboss:type=Service,name=SystemProperties
12:16:27,889 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/properties-service.xml
12:16:27,905 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/schedule-manager-service.xml
12:16:27,921 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/schedule-manager-service.xml
12:16:27,936 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/scheduler-service.xml
12:16:27,952 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/scheduler-service.xml
12:16:27,967 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/sqlexception-service.xml
12:16:27,999 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/sqlexception-service.xml
12:16:27,999 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/transaction-service.xml
12:16:28,108 INFO [CachedConnectionManager] Started jboss.jca:service=CachedConnectionManager
12:16:28,155 INFO [JaasSecurityManagerService] Created securityMgr=org.jboss.security.plugins.JaasSecurityManager@107c615
12:16:28,155 INFO [JaasSecurityManagerService] setCachePolicy, c=org.jboss.util.TimedCachePolicy@1a8ecf4
12:16:28,155 INFO [JaasSecurityManagerService] Added HsqlDbRealm, org.jboss.security.plugins.SecurityDomainContext@15c9f9d to map
12:16:28,171 INFO [DefaultDS] Bound connection factory for resource adapter for ConnectionManager 'jboss.jca:service=LocalTxCM,name=DefaultDS to JNDI name 'java:/DefaultDS'
12:16:28,171 INFO [TxConnectionManager] Started jboss.jca:service=LocalTxCM,name=DefaultDS
12:16:31,874 INFO [PersistenceManager] Started jboss.mq:service=PersistenceManager
12:16:31,889 INFO [DestinationManager] Started jboss.mq:service=DestinationManager
12:16:31,921 INFO [A] Bound to JNDI name: queue/A
12:16:31,921 INFO [A] Started jboss.mq.destination:service=Queue,name=A
12:16:31,936 INFO [B] Bound to JNDI name: queue/B
12:16:31,936 INFO [B] Started jboss.mq.destination:service=Queue,name=B
12:16:31,936 INFO [C] Bound to JNDI name: queue/C
12:16:31,936 INFO [C] Started jboss.mq.destination:service=Queue,name=C
12:16:31,936 INFO [D] Bound to JNDI name: queue/D
12:16:31,936 INFO [D] Started jboss.mq.destination:service=Queue,name=D
12:16:31,936 INFO [ex] Bound to JNDI name: queue/ex
12:16:31,936 INFO [ex] Started jboss.mq.destination:service=Queue,name=ex
12:16:31,967 INFO [JaasSecurityManagerService] Created securityMgr=org.jboss.security.plugins.JaasSecurityManager@1c1a68b
12:16:31,967 INFO [JaasSecurityManagerService] setCachePolicy, c=org.jboss.util.TimedCachePolicy@9d2f26
12:16:31,967 INFO [JaasSecurityManagerService] Added jbossmq, org.jboss.security.plugins.SecurityDomainContext@1829c6b to map
12:16:31,967 INFO [SecurityManager] Started jboss.mq:service=SecurityManager
12:16:31,983 INFO [testTopic] Bound to JNDI name: topic/testTopic
12:16:31,983 INFO [testTopic] Started jboss.mq.destination:service=Topic,name=testTopic
12:16:31,983 INFO [securedTopic] Bound to JNDI name: topic/securedTopic
12:16:31,983 INFO [securedTopic] Started jboss.mq.destination:service=Topic,name=securedTopic
12:16:31,983 INFO [testDurableTopic] Bound to JNDI name: topic/testDurableTopic
12:16:31,983 INFO [testDurableTopic] Started jboss.mq.destination:service=Topic,name=testDurableTopic
12:16:31,999 INFO [testQueue] Bound to JNDI name: queue/testQueue
12:16:31,999 INFO [testQueue] Started jboss.mq.destination:service=Queue,name=testQueue
12:16:31,999 INFO [InterceptorLoader] Started jboss.mq:service=TracingInterceptor
12:16:31,999 INFO [Invoker] Started jboss.mq:service=Invoker
12:16:32,124 INFO [HTTPServerILService] Started jboss.mq:service=InvocationLayer,type=HTTP
12:16:32,124 INFO [JVMServerILService] Started jboss.mq:service=InvocationLayer,type=JVM

Thanks
vikas

[techatool]

you can also trigger renegotiation of client ssl on the same server ssl port (in tomcat) by accessing the attribute org.apache.coyote.request.X509Certificate from the request. The servlet attr javax.servlet.request.X509Certificate should work as well but doesn't seem to in tomcat 5.0.x
Also, with IE 6 I get the a Warning message with stack trace
Sep 22, 2005 5:16:47 PM org.apache.coyote.http11.Http11Processor action
WARNING: Exception getting SSL Cert
java.net.SocketException: Socket Closed
at java.net.PlainSocketImpl.setOption(PlainSocketImpl.java:177)
at java.net.Socket.setSoTimeout(Socket.java:924)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.setSoTimeout(DashoA12275)
at org.apache.tomcat.util.net.jsse.JSSE14Support.synchronousHandshake(JSSE14Support.java)

Has anyone encountered this ?
btw, I am on jdk 1.4.2

-Atul.