3 Replies Latest reply on Sep 22, 2005 8:03 PM by Atul Mahajan

    HTTP TLS/SSL "Exception getting SSL Cert"

    Stephen Saucier Newbie

      I'm using JBoss 4.0.2.
      I'd like to use SSL/TLS with mutual client-server certificate authentication.

      I set up a connector in tomcat's server.xml to listen on port 8443. (Note that the Tomcat docs state that sslProtocol="TLS" is the default but I had to specify it explicitly in order to have my connector use TLS.

      I specified clientAuth="false" in the connector configuration, because I don't want to require client certificate authentication for everything running on the server. The tomcat documentation indicates that in this situation, if a web.xml specifies an auth-method of CLIENT-CERT that it will still request client certificate. I assume it accomplishes this through ssl renegotiation. This does not seem to be happening.

      When I connect to a web application that specifies an auth-constraint of CLIENT-CERT, the connection is dropped and the server log shows the following:

      15:27:48,117 INFO [JSSE14Support] SSL Error getting client Certs
      javax.net.ssl.SSLHandshakeException: null cert chain
      at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150)
      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1476)
      at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:174)
      at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:164)
      at com.sun.net.ssl.internal.ssl.ServerHandshaker.clientCertificate(ServerHandshaker.java:1069)
      at com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:187)
      at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
      at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:433)
      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:815)
      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:677)
      at com.sun.net.ssl.internal.ssl.AppInputStream.read(AppInputStream.java:75)
      at java.io.InputStream.read(InputStream.java:89)
      at org.apache.tomcat.util.net.jsse.JSSE14Support.synchronousHandshake(JSSE14Support.java:87)
      at org.apache.tomcat.util.net.jsse.JSSE14Support.handShake(JSSE14Support.java:66)
      at org.apache.tomcat.util.net.jsse.JSSESupport.getPeerCertificateChain(JSSESupport.java:120)
      at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:1106)
      at org.apache.coyote.Request.action(Request.java:363)
      at org.apache.catalina.authenticator.SSLAuthenticator.authenticate(SSLAuthenticator.java:134)
      at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:446)
      at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:59)
      at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
      at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
      at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
      at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
      at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)
      at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744)
      at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
      at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
      at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
      at java.lang.Thread.run(Thread.java:595)
      15:27:48,123 WARN [Http11Processor] Exception getting SSL Cert
      javax.net.ssl.SSLHandshakeException: null cert chain
      at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:150)
      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1476)
      at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:174)
      at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:164)
      at com.sun.net.ssl.internal.ssl.ServerHandshaker.clientCertificate(ServerHandshaker.java:1069)
      at com.sun.net.ssl.internal.ssl.ServerHandshaker.processMessage(ServerHandshaker.java:187)
      at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
      at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:433)
      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:815)
      at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readDataRecord(SSLSocketImpl.java:677)
      at com.sun.net.ssl.internal.ssl.AppInputStream.read(AppInputStream.java:75)
      at java.io.InputStream.read(InputStream.java:89)
      at org.apache.tomcat.util.net.jsse.JSSE14Support.synchronousHandshake(JSSE14Support.java:87)
      at org.apache.tomcat.util.net.jsse.JSSE14Support.handShake(JSSE14Support.java:66)
      at org.apache.tomcat.util.net.jsse.JSSESupport.getPeerCertificateChain(JSSESupport.java:120)
      at org.apache.coyote.http11.Http11Processor.action(Http11Processor.java:1106)
      at org.apache.coyote.Request.action(Request.java:363)
      at org.apache.catalina.authenticator.SSLAuthenticator.authenticate(SSLAuthenticator.java:134)
      at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:446)
      at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:59)
      at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
      at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
      at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
      at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
      at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)
      at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744)
      at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
      at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
      at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
      at java.lang.Thread.run(Thread.java:595)


      which is what I would expect, since the browser I am using (Firefox 1.0.6) never asks me to choose a certificate (it seems to work as expected for other sites, and when deploying the same web application to WebLogic Server 8.1.

      If I change my tomcat connector configuration to specify clientAuth="want" instead of printing an error to the server logs, the browser is returned a HTTP error code 400 and states that no client certificate was provided (which again is expected because the browser didn't ask me to specify a certificate).

      The only way that I can get CLIENT-CERT authentication to work is if I specify clientAuth="true" in the tomcat server.xml and that is really not what I want.

      It seems that ssl is not renegotiating with the client to request a certificate when it encounters the CLIENT-CERT auth-constraint. How can I solve this problem?

      Thanks,
      Stephen Saucier

        • 1. Re: HTTP TLS/SSL
          Stephen Saucier Newbie

          To answer my own question,

          if you specify a truststoreFile attribute in the tomcat connector configuration, the clientAuth attribute works as intended. In retrospect I suppose the behavior I was seeing shouldn't have been totally unexpected, but it still doesn't really seem to point towards the proper solution.

          I should think it should still request the client certificate, and then always fail, saying the certificate is not trusted (or work as intended if the client cert is issued by a JDK/JSSE cacert).

          Is there any way to tell tomcat to not validate the certificate (similar to specifying org.jboss.security.auth.certs.AnyCertVerifier as the verifier module-option for the org.jboss.security.auth.spi.BaseCertLoginModule)? I guess this would cause unexpected behavior for the AnyCertVerifier since it is relying on the transport layer to perform authentication.

          Thanks,
          Stephen Saucier

          • 2. Re: HTTP TLS/SSL
            vikas bhasin Newbie

            I'm using jboss 3.2.3
            I am deploying the ssl but https didn't work.

            I am connecting to the server and i have register the certificate of ssl.keystore and open the connection port of https but it didn't work. After connecting the server log shows the following:


            12:15:23,874 INFO [Server] Starting JBoss (MX MicroKernel)...
            12:15:23,874 INFO [Server] Release ID: JBoss [WonderLand] 3.2.3 (build: CVSTag=JBoss_3_2_3 date=200311301445)
            12:15:23,874 INFO [Server] Home Dir: D:\jboss-3.2.3
            12:15:23,874 INFO [Server] Home URL: file:/D:/jboss-3.2.3/
            12:15:23,874 INFO [Server] Library URL: file:/D:/jboss-3.2.3/lib/
            12:15:23,874 INFO [Server] Patch URL: null
            12:15:23,874 INFO [Server] Server Name: default
            12:15:23,874 INFO [Server] Server Home Dir: D:\jboss-3.2.3\server\default
            12:15:23,874 INFO [Server] Server Home URL: file:/D:/jboss-3.2.3/server/default/
            12:15:23,874 INFO [Server] Server Data Dir: D:\jboss-3.2.3\server\default\data
            12:15:23,874 INFO [Server] Server Temp Dir: D:\jboss-3.2.3\server\default\tmp
            12:15:23,874 INFO [Server] Server Config URL: file:/D:/jboss-3.2.3/server/default/conf/
            12:15:23,889 INFO [Server] Server Library URL: file:/D:/jboss-3.2.3/server/default/lib/
            12:15:23,889 INFO [Server] Root Deployment Filename: jboss-service.xml
            12:15:23,889 INFO [Server] Starting General Purpose Architecture (GPA)...
            12:15:24,108 INFO [ServerInfo] Java version: 1.4.2_08,Sun Microsystems Inc.
            12:15:24,108 INFO [ServerInfo] Java VM: Java HotSpot(TM) Client VM 1.4.2_08-b03,Sun Microsystems Inc.
            12:15:24,108 INFO [ServerInfo] OS-System: Windows 2000 5.0,x86
            12:15:24,155 INFO [ServiceController] Controller MBean online
            12:15:24,264 INFO [MainDeployer] Started jboss.system:service=MainDeployer
            12:15:24,342 INFO [MainDeployer] Adding deployer: org.jboss.deployment.JARDeployer@1a68ef9
            12:15:24,342 INFO [JARDeployer] Started jboss.system:service=JARDeployer
            12:15:24,374 INFO [MainDeployer] Adding deployer: org.jboss.deployment.SARDeployer@1e232b5
            12:15:24,389 INFO [SARDeployer] Started jboss.system:service=ServiceDeployer
            12:15:24,389 INFO [Server] Core system initialized
            12:15:24,421 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/conf/jboss-service.xml
            12:15:42,842 INFO [Log4jService$URLWatchTimerTask] Configuring from URL: resource:log4j.xml
            12:15:43,186 INFO [AbstractDeploymentScanner$ScannerThread] Running
            12:15:43,186 INFO [LocalJBossServerDomain] Started jboss.management.local:j2eeType=J2EEDomain,name=Manager
            12:15:43,186 INFO [Log4jService] Started jboss.system:type=Log4jService,service=Logging
            12:15:43,202 INFO [WebService] Started WebServer with address: 0.0.0.0:8083
            12:15:43,202 INFO [WebService] Using RMI server codebase: http://CFTINT-006:8083/
            12:15:43,202 INFO [WebService] Started jboss:service=WebService
            12:15:43,217 INFO [NamingService] Starting jnp server
            12:15:43,311 INFO [NamingService] Started jnpPort=1099, rmiPort=1098, backlog=50, bindAddress=/0.0.0.0, Client SocketFactory=null, Server SocketFactory=org.jboss.net.sockets.DefaultSocketFactory@ad093076
            12:15:43,327 INFO [NamingService] Listening on port 1099
            12:15:43,342 INFO [NamingService] Started jboss:service=Naming
            12:15:43,342 INFO [JNDIView] Started jboss:service=JNDIView
            12:15:43,342 INFO [SecurityConfig] Started jboss.security:service=SecurityConfig
            12:15:43,405 INFO [XMLLoginConfig] Started jboss.security:service=XMLLoginConfig
            12:15:43,421 INFO [JaasSecurityManagerService] Started jboss.security:service=JaasSecurityManager
            12:15:43,467 INFO [TransactionManagerService] Started jboss:service=TransactionManager
            12:15:43,514 INFO [JRMPInvoker] Started jboss:service=invoker,type=jrmp
            12:15:43,577 INFO [JRMPProxyFactory] Started jboss:service=proxyFactory,target=ClientUserTransactionFactory
            12:15:43,577 INFO [JRMPProxyFactory] Started jboss:service=proxyFactory,target=ClientUserTransaction
            12:15:43,592 INFO [ClientUserTransactionService] Started jboss:service=ClientUserTransaction
            12:15:43,592 INFO [LocalInvoker] Started jboss:service=invoker,type=local
            12:15:43,624 INFO [PooledInvoker] Started jboss:service=invoker,type=pooled
            12:15:43,639 INFO [MainDeployer] Adding deployer: org.jboss.ejb.EJBDeployer@1fac852
            12:15:43,639 INFO [EJBDeployer] Started jboss.ejb:service=EJBDeployer
            12:15:43,639 INFO [MainDeployer] Adding deployer: org.jboss.deployment.EARDeployer@15a94f
            12:15:43,639 INFO [EARDeployer] Started jboss.j2ee:service=EARDeployer
            12:15:43,671 INFO [MainDeployer] Adding deployer: org.jboss.varia.deployment.BeanShellSubDeployer@6e41b5
            12:15:43,671 INFO [BeanShellSubDeployer] Started jboss.scripts:service=BSHDeployer
            12:15:43,686 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/
            12:15:43,702 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
            12:15:43,717 INFO [MainDeployer] deployment waiting for deployer: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
            12:15:43,842 INFO [HttpInvoker] Started jboss:service=invoker,type=http
            12:15:43,842 INFO [HttpInvokerHA] Started jboss:service=invoker,type=httpHA
            12:15:43,858 INFO [HttpProxyFactory] Started jboss:service=invoker,type=http,target=Naming
            12:15:43,858 INFO [HttpProxyFactory] Started jboss:service=invoker,type=http,target=Naming,readonly=true
            12:15:43,936 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/
            12:15:44,202 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-jca.sar
            12:15:44,905 INFO [XSLSubDeployer] Created templates: org.apache.xalan.templates.StylesheetRoot@3f265b
            12:15:44,905 INFO [MainDeployer] Adding deployer: org.jboss.resource.RARDeployer@1ef3a22
            12:15:44,905 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
            12:15:44,905 INFO [MainDeployer] deployment waiting for deployer: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
            12:15:44,905 INFO [MainDeployer] Deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/ is waiting for an appropriate deployer.
            12:15:44,905 INFO [RARDeployer] Started jboss.jca:service=RARDeployer
            12:15:44,905 INFO [MainDeployer] Adding deployer: org.jboss.deployment.XSLSubDeployer@511e0a
            12:15:44,905 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
            12:15:44,905 INFO [MainDeployer] deployment waiting for deployer: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
            12:15:44,905 INFO [MainDeployer] Deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/ is waiting for an appropriate deployer.
            12:15:44,921 INFO [XSLSubDeployer] Started jboss.jca:service=ConnectionFactoryDeployer
            12:15:44,921 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-jca.sar
            12:15:44,921 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/
            12:15:44,936 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/ant.jar
            12:15:46,577 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/bootstrap.jar
            12:15:46,624 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/catalina.jar
            12:15:48,358 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/commons-beanutils.jar
            12:15:48,671 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/commons-collections.jar
            12:15:49,327 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/commons-digester.jar
            12:15:49,671 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/commons-logging.jar
            12:15:49,780 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/jakarta-regexp-1.3.jar
            12:15:49,842 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/jasper-compiler.jar
            12:15:50,202 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/jasper-runtime.jar
            12:15:50,389 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/naming-common.jar
            12:15:50,499 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/naming-resources.jar
            12:15:50,608 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/servlets-common.jar
            12:15:50,671 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/servlets-default.jar
            12:15:50,686 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/servlets-invoker.jar
            12:15:50,717 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/servlets-webdav.jar
            12:15:50,733 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat-coyote.jar
            12:15:50,889 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat-http11.jar
            12:15:51,014 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat-jk2.jar
            12:15:51,186 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat-util.jar
            12:15:51,671 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/tomcat41-service.jar
            12:16:00,717 INFO [STDOUT] Apache Tomcat/4.1.29
            12:16:00,889 INFO [Http11Protocol] Initializing Coyote HTTP/1.1 on port 8090
            12:16:00,889 INFO [Engine] CoyoteConnector Coyote can't register jmx for protocol
            12:16:00,921 INFO [Http11Protocol] Starting Coyote HTTP/1.1 on port 8090
            12:16:01,046 INFO [Engine] CoyoteConnector Coyote can't register jmx for protocol
            12:16:01,264 INFO [ChannelSocket] JK2: ajp13 listening on /0.0.0.0:8009
            12:16:01,296 INFO [JkMain] Jk running ID=0 time=0/250 config=null
            12:16:01,296 INFO [Engine] HttpConnector Opening server socket on host IP address 0.0.0.0
            12:16:01,296 INFO [Engine] HttpConnector[3443] Starting background thread
            12:16:01,483 INFO [Engine] HttpProcessor[3443][0] Starting background thread
            12:16:01,483 INFO [Engine] HttpProcessor[3443][1] Starting background thread
            12:16:01,483 INFO [Engine] HttpProcessor[3443][2] Starting background thread
            12:16:01,483 INFO [Engine] HttpProcessor[3443][3] Starting background thread
            12:16:01,499 INFO [Engine] HttpProcessor[3443][4] Starting background thread
            12:16:01,499 INFO [EmbeddedTomcatService] OK
            12:16:01,499 INFO [MainDeployer] Adding deployer: org.jboss.web.tomcat.tc4.EmbeddedTomcatService@14d659d
            12:16:01,499 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
            12:16:01,702 INFO [EmbeddedTomcatService] deploy, ctxPath=/invoker, warUrl=file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
            12:16:02,421 INFO [Engine] SingleSignOnContextConfig[/invoker]: Added certificates -> request attribute Valve
            12:16:02,499 INFO [Engine] SingleSignOnContextConfig[/invoker]: Configured an authenticator for method BASIC
            12:16:02,514 WARN [EmbeddedTomcatService] Unable to invoke setDelegate on class loader:org.jboss.web.tomcat.tc4.WebCtxLoader$ENCLoader@1558dc
            12:16:02,514 INFO [Engine] StandardManager[/invoker]: Seeding random number generator class java.security.SecureRandom
            12:16:02,655 INFO [Engine] StandardManager[/invoker]: Seeding of random number generator has been completed
            12:16:02,717 INFO [Engine] StandardWrapper[/invoker:default]: Loading container servlet default
            12:16:02,780 INFO [Engine] StandardWrapper[/invoker:invoker]: Loading container servlet invoker
            12:16:03,858 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/http-invoker.sar/invoker.war/
            12:16:03,858 INFO [EmbeddedTomcatService] Started jboss.web:service=WebServer
            12:16:03,874 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jbossweb-tomcat41.sar/
            12:16:03,874 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-httpil.sar/
            12:16:03,889 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-httpil.sar/jbossmq-httpil.war/
            12:16:04,108 INFO [EmbeddedTomcatService] deploy, ctxPath=/jbossmq-httpil, warUrl=file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-httpil.sar/jbossmq-httpil.war/
            12:16:04,389 INFO [Engine] SingleSignOnContextConfig[/jbossmq-httpil]: Added certificates -> request attribute Valve
            12:16:04,389 INFO [Engine] SingleSignOnContextConfig[/jbossmq-httpil]: Configured an authenticator for method BASIC
            12:16:04,421 WARN [EmbeddedTomcatService] Unable to invoke setDelegate on class loader:org.jboss.web.tomcat.tc4.WebCtxLoader$ENCLoader@b64f2e
            12:16:04,421 INFO [Engine] StandardManager[/jbossmq-httpil]: Seeding random number generator class java.security.SecureRandom
            12:16:04,421 INFO [Engine] StandardManager[/jbossmq-httpil]: Seeding of random number generator has been completed
            12:16:04,421 INFO [Engine] StandardWrapper[/jbossmq-httpil:default]: Loading container servlet default
            12:16:04,421 INFO [Engine] StandardWrapper[/jbossmq-httpil:invoker]: Loading container servlet invoker
            12:16:04,780 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-httpil.sar/
            12:16:04,780 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jmx-invoker-adaptor-server.sar/
            12:16:04,952 INFO [JRMPProxyFactory] Started jboss.jmx:type=adaptor,name=Invoker,protocol=jrmp,service=proxyFactory
            12:16:04,952 INFO [NamingAlias] Bound link jmx/rmi/RMIAdaptor to jmx/invoker/RMIAdaptor
            12:16:04,952 INFO [NamingAlias] Started jboss.jmx:alias=jmx/rmi/RMIAdaptor
            12:16:04,967 INFO [InvokerAdaptorService] Started jboss.jmx:type=adaptor,name=Invoker
            12:16:04,983 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jmx-invoker-adaptor-server.sar/
            12:16:08,296 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/management/console-mgr.sar
            12:16:11,936 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7387console-mgr.sar-contents/console-mgr-classes.jar
            12:16:12,780 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7387console-mgr.sar-contents/jcommon.jar
            12:16:13,514 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7387console-mgr.sar-contents/jfreechart-demo.jar
            12:16:14,952 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7387console-mgr.sar-contents/jfreechart.jar
            12:16:15,389 INFO [PluginManager] Started jboss.admin:service=PluginManager
            12:16:15,389 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/management/console-mgr.sar
            12:16:15,405 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/snmp-adaptor.sar/
            12:16:15,421 INFO [SARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/deploy/snmp-adaptor.sar/castor.jar
            12:16:24,030 INFO [TrapdService] Started jboss.jmx:name=SnmpAgent,service=trapd,type=logger
            12:16:24,030 INFO [SnmpAgentService] Instantiating trap emitter ...
            12:16:24,061 INFO [SnmpAgentService] Starting trap emitter ...
            12:16:24,061 INFO [TrapEmitter] Reading resource: "/managers.xml"
            12:16:24,452 INFO [TrapEmitter] "/managers.xml" valid. Read 1 monitoring managers
            12:16:24,452 INFO [TrapEmitter] Executing resource: "/managers.xml"
            12:16:24,546 INFO [TrapFactorySupport] Reading resource: "/notifications.xml"
            12:16:24,608 INFO [TrapFactorySupport] "/notifications.xml" valid. Read 2 mappings
            12:16:24,608 INFO [TrapFactorySupport] Executing resource: "/notifications.xml"
            12:16:24,671 INFO [TrapFactorySupport] Trap factory going active
            12:16:24,671 INFO [SnmpAgentService] Instantiating subscription manager ...
            12:16:24,671 INFO [SnmpAgentService] Starting subscription manager ...
            12:16:24,671 INFO [SubscriptionMgr] Reading resource: "/mbeans.xml"
            12:16:24,717 INFO [SubscriptionMgr] "/mbeans.xml" valid. Read 2 monitored objects
            12:16:24,717 INFO [SubscriptionMgr] Executing resource: "/mbeans.xml"
            12:16:24,717 INFO [SubscriptionMgr] Subscription manager done
            12:16:24,733 INFO [SnmpAgentService] Starting heartbeat controller ...
            12:16:24,733 WARN [Heartbeat] Heartbeat disabled
            12:16:24,796 INFO [SnmpAgentService] Snmp Agent going active
            12:16:24,796 INFO [SnmpAgentService] Started jboss.jmx:name=SnmpAgent,service=snmp,type=adaptor
            12:16:24,811 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/snmp-adaptor.sar/
            12:16:24,842 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/uuid-key-generator.sar
            12:16:24,921 INFO [UUIDKeyGeneratorFactoryService] Started jboss:service=UUIDKeyGeneratorFactory
            12:16:24,936 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/uuid-key-generator.sar
            12:16:24,967 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-local-jdbc.rar
            12:16:25,155 INFO [RARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7390jboss-local-jdbc.rar-contents/jboss-local-jdbc.jar
            12:16:25,202 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-local-jdbc.rar
            12:16:25,264 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-xa-jdbc.rar
            12:16:25,405 INFO [RARMetaData] Loading JBoss Resource Adapter for JDBC 2 XA drivers
            12:16:25,405 INFO [RARMetaData] Required license terms present. See deployment descriptor.
            12:16:25,452 INFO [RARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7391jboss-xa-jdbc.rar-contents/jboss-xa-jdbc.jar
            12:16:25,592 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jboss-xa-jdbc.rar
            12:16:25,686 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jms-ra.rar
            12:16:25,936 INFO [RARDeployer] nested deployment: file:/D:/jboss-3.2.3/server/default/tmp/deploy/tmp7392jms-ra.rar-contents/jms-ra.jar
            12:16:25,983 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jms-ra.rar
            12:16:25,983 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/hsqldb-ds.xml
            12:16:26,202 INFO [RARDeployment] Started jboss.jca:service=ManagedConnectionFactory,name=DefaultDS
            12:16:26,217 INFO [JBossManagedConnectionPool] Started jboss.jca:service=ManagedConnectionPool,name=DefaultDS
            12:16:26,249 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/hsqldb-ds.xml
            12:16:26,264 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jms-ds.xml
            12:16:26,389 INFO [JMSProviderLoader] Bound adapter to java:/DefaultJMSProvider
            12:16:26,389 INFO [JMSProviderLoader] Started jboss.mq:service=JMSProviderLoader,name=JBossMQProvider
            12:16:26,389 INFO [ServerSessionPoolLoader] pool factory StdJMSPool bound to java:/StdJMSPool
            12:16:26,389 INFO [ServerSessionPoolLoader] Started jboss.mq:service=ServerSessionPoolMBean,name=StdJMSPool
            12:16:26,452 INFO [RARDeployment] Started jboss.jca:service=ManagedConnectionFactory,name=JmsXA
            12:16:26,452 INFO [JBossManagedConnectionPool] Started jboss.jca:service=ManagedConnectionPool,name=JmsXA
            12:16:26,467 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jms-ds.xml
            12:16:26,483 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/cache-invalidation-service.xml
            12:16:26,514 INFO [InvalidationManager] Starting Invalidation Manager jboss.cache:service=InvalidationManager
            12:16:26,514 INFO [InvalidationManager] Started jboss.cache:service=InvalidationManager
            12:16:26,530 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/cache-invalidation-service.xml
            12:16:26,546 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/client-deployer-service.xml
            12:16:26,592 INFO [MainDeployer] Adding deployer: org.jboss.deployment.ClientDeployer@1dba9f9
            12:16:26,592 INFO [ClientDeployer] Started jboss.j2ee:service=ClientDeployer
            12:16:26,608 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/client-deployer-service.xml
            12:16:26,624 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/hsqldb-jdbc2-service.xml
            12:16:26,764 INFO [MessageCache] Started jboss.mq:service=MessageCache
            12:16:26,780 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/hsqldb-jdbc2-service.xml
            12:16:26,796 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-destinations-service.xml
            12:16:26,921 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-destinations-service.xml
            12:16:26,936 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-service.xml
            12:16:27,124 INFO [DynamicStateManager] Started jboss.mq:service=StateManager
            12:16:27,139 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jbossmq-service.xml
            12:16:27,155 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jvm-il-service.xml
            12:16:27,202 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/jvm-il-service.xml
            12:16:27,217 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/oil-service.xml
            12:16:27,264 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/oil-service.xml
            12:16:27,280 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/oil2-service.xml
            12:16:27,311 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/oil2-service.xml
            12:16:27,327 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/rmi-il-service.xml
            12:16:27,374 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/rmi-il-service.xml
            12:16:27,374 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/jms/uil2-service.xml
            12:16:27,452 INFO [NamingAlias] Bound link UILConnectionFactory to UIL2ConnectionFactory
            12:16:27,452 INFO [NamingAlias] Started jboss.mq:service=InvocationLayer,type=UIL
            12:16:27,452 INFO [NamingAlias] Bound link UILXAConnectionFactory to UIL2XAConnectionFactory
            12:16:27,452 INFO [NamingAlias] Started jboss.mq:service=InvocationLayer,type=UILXA
            12:16:27,467 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/jms/uil2-service.xml
            12:16:27,483 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/mail-service.xml
            12:16:27,796 INFO [MailService] Mail Service bound to java:/Mail
            12:16:27,796 INFO [MailService] Started jboss:service=Mail
            12:16:27,811 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/mail-service.xml
            12:16:27,827 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/properties-service.xml
            12:16:27,874 INFO [PropertyEditorManagerService] Started jboss:type=Service,name=PropertyEditorManager
            12:16:27,874 INFO [SystemPropertiesService] Started jboss:type=Service,name=SystemProperties
            12:16:27,889 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/properties-service.xml
            12:16:27,905 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/schedule-manager-service.xml
            12:16:27,921 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/schedule-manager-service.xml
            12:16:27,936 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/scheduler-service.xml
            12:16:27,952 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/scheduler-service.xml
            12:16:27,967 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/sqlexception-service.xml
            12:16:27,999 INFO [MainDeployer] Deployed package: file:/D:/jboss-3.2.3/server/default/deploy/sqlexception-service.xml
            12:16:27,999 INFO [MainDeployer] Starting deployment of package: file:/D:/jboss-3.2.3/server/default/deploy/transaction-service.xml
            12:16:28,108 INFO [CachedConnectionManager] Started jboss.jca:service=CachedConnectionManager
            12:16:28,155 INFO [JaasSecurityManagerService] Created securityMgr=org.jboss.security.plugins.JaasSecurityManager@107c615
            12:16:28,155 INFO [JaasSecurityManagerService] setCachePolicy, c=org.jboss.util.TimedCachePolicy@1a8ecf4
            12:16:28,155 INFO [JaasSecurityManagerService] Added HsqlDbRealm, org.jboss.security.plugins.SecurityDomainContext@15c9f9d to map
            12:16:28,171 INFO [DefaultDS] Bound connection factory for resource adapter for ConnectionManager 'jboss.jca:service=LocalTxCM,name=DefaultDS to JNDI name 'java:/DefaultDS'
            12:16:28,171 INFO [TxConnectionManager] Started jboss.jca:service=LocalTxCM,name=DefaultDS
            12:16:31,874 INFO [PersistenceManager] Started jboss.mq:service=PersistenceManager
            12:16:31,889 INFO [DestinationManager] Started jboss.mq:service=DestinationManager
            12:16:31,921 INFO [A] Bound to JNDI name: queue/A
            12:16:31,921 INFO [A] Started jboss.mq.destination:service=Queue,name=A
            12:16:31,936 INFO [B] Bound to JNDI name: queue/B
            12:16:31,936 INFO [B] Started jboss.mq.destination:service=Queue,name=B
            12:16:31,936 INFO [C] Bound to JNDI name: queue/C
            12:16:31,936 INFO [C] Started jboss.mq.destination:service=Queue,name=C
            12:16:31,936 INFO [D] Bound to JNDI name: queue/D
            12:16:31,936 INFO [D] Started jboss.mq.destination:service=Queue,name=D
            12:16:31,936 INFO [ex] Bound to JNDI name: queue/ex
            12:16:31,936 INFO [ex] Started jboss.mq.destination:service=Queue,name=ex
            12:16:31,967 INFO [JaasSecurityManagerService] Created securityMgr=org.jboss.security.plugins.JaasSecurityManager@1c1a68b
            12:16:31,967 INFO [JaasSecurityManagerService] setCachePolicy, c=org.jboss.util.TimedCachePolicy@9d2f26
            12:16:31,967 INFO [JaasSecurityManagerService] Added jbossmq, org.jboss.security.plugins.SecurityDomainContext@1829c6b to map
            12:16:31,967 INFO [SecurityManager] Started jboss.mq:service=SecurityManager
            12:16:31,983 INFO [testTopic] Bound to JNDI name: topic/testTopic
            12:16:31,983 INFO [testTopic] Started jboss.mq.destination:service=Topic,name=testTopic
            12:16:31,983 INFO [securedTopic] Bound to JNDI name: topic/securedTopic
            12:16:31,983 INFO [securedTopic] Started jboss.mq.destination:service=Topic,name=securedTopic
            12:16:31,983 INFO [testDurableTopic] Bound to JNDI name: topic/testDurableTopic
            12:16:31,983 INFO [testDurableTopic] Started jboss.mq.destination:service=Topic,name=testDurableTopic
            12:16:31,999 INFO [testQueue] Bound to JNDI name: queue/testQueue
            12:16:31,999 INFO [testQueue] Started jboss.mq.destination:service=Queue,name=testQueue
            12:16:31,999 INFO [InterceptorLoader] Started jboss.mq:service=TracingInterceptor
            12:16:31,999 INFO [Invoker] Started jboss.mq:service=Invoker
            12:16:32,124 INFO [HTTPServerILService] Started jboss.mq:service=InvocationLayer,type=HTTP
            12:16:32,124 INFO [JVMServerILService] Started jboss.mq:service=InvocationLayer,type=JVM

            Thanks
            vikas

            • 3. Re: HTTP TLS/SSL
              Atul Mahajan Newbie

              you can also trigger renegotiation of client ssl on the same server ssl port (in tomcat) by accessing the attribute org.apache.coyote.request.X509Certificate from the request. The servlet attr javax.servlet.request.X509Certificate should work as well but doesn't seem to in tomcat 5.0.x
              Also, with IE 6 I get the a Warning message with stack trace
              Sep 22, 2005 5:16:47 PM org.apache.coyote.http11.Http11Processor action
              WARNING: Exception getting SSL Cert
              java.net.SocketException: Socket Closed
              at java.net.PlainSocketImpl.setOption(PlainSocketImpl.java:177)
              at java.net.Socket.setSoTimeout(Socket.java:924)
              at com.sun.net.ssl.internal.ssl.SSLSocketImpl.setSoTimeout(DashoA12275)
              at org.apache.tomcat.util.net.jsse.JSSE14Support.synchronousHandshake(JSSE14Support.java)

              Has anyone encountered this ?
              btw, I am on jdk 1.4.2

              -Atul.