Re: [Ejbca-develop] EJBCA Hung!

[Developer <de...@bi...>]

Thanks a bunch, can't wait to try this out. I had started down the trail
of learning the internals of Tomcat and Jboss 3.2.4 to try to resolve
it.

You are the man!

I'll keep you posted,

Chris

On Thu, 2004-04-08 at 02:59, Tomas Gustavsson wrote:
> I have verified support for JBoss 3.2.4 now. Attached are the changed 
> files that will be in the next release.
> 
> tomcat50-jboss32.xml is in directory 'ejbca\src\adminweb\WEB-INF\'
> setup-admiweb.cmd and .sh is in the directly in the ejbca directory.
> 
> I did a clean install and ran the install.cmd script and it works nicely.
> 
> Cheers,
> Tomas
> 
> Tomas Gustavsson wrote:
> 
> >
> > Aha, no we haven't tried JBoss 3.2.4 yet. It should be possible to 
> > rather easily modify the original tomcatxx-jbossyy.xml file. All that 
> > is needed for EJBCA is SSL requiring client certficate authentication 
> > on port 8443.
> >
> > We'll try to add support for it to the next release.
> >
> > Cheers,
> > Tomas
> >
> > Developer wrote:
> >
> >> I think I figured out the answer to my problem which leads to another
> >> question.
> >>
> >> I'm convinced that my hanging issue is due to an incorrectly configured
> >> tomcat41-jboss32.xml file.  I'm using JBOSS 3.2.4RC1 which is based on
> >> tomcat5.X.
> >>
> >> Do you have an equivalent tomcat50-jboss324.xml file for tomcat?
> >>
> >> I've started looking into it but I'm not familiar enough with Tomcat or
> >> what is needed for EJBCA.
> >>
> >> Thanks,
> >>
> >> Chris
> >>
> >>
> >> On Tue, 2004-04-06 at 15:04, Developer wrote:
> >>  
> >>
> >>> I'm running the install.sh script and it appears to have hung.  
> >>> Below is
> >>> the last output in the hung state.  What am I doing wrong?
> >>>
> >>> Thanks,
> >>>
> >>> Chris.
> >>>
> >>> Last message from install.sh
> >>>
> >>> Initializing CA
> >>> Generating rootCA keystore:
> >>> DN: CN=CompanyCA,O=Company LLC,C=US
> >>> Keysize: 2048
> >>> Validity (days): 365
> >>> Policy ID: 2.5.29.32.0
> >>> Initalizing Temporary Authorization Module.
> >>> Creating CA...
> >>> CAId for created CA: -1013392277
> >>> -Created and published initial CRL.
> >>> CA initialized
> >>>
> >>>
> >>> Setup of Administration Web Interface have started, this will take a
> >>> minute to complete ....
> >>> HANGING HERE!!!
> >>>
> >>>
> >>> Last message in JBOSS log.
> >>>
> >>> superadmin, Certificate : No Certificate Involved, Comment : Changed
> >>> status to STATUS_GENERATED.
> >>> 12:31:14,609 INFO  [Log4jLogDevice] April 6, 2004 12:31:14 PM HST, CAId
> >>> : -1013392277, RA, EVENT_INFO_CHANGEDENDENTITY, Administrator :
> >>> BATCHCMDLINE, User :
> >>> superadmin, Certificate : No Certificate Involved, Comment : New status
> >>> : 11
> >>>
> >>>
> >>>   
> >>
> >
> 
> 
> ______________________________________________________________________
> <Server>
> 
>   <Service name="jboss.web">
> 
>     <!-- A HTTP/1.1 Connector on port 8080 -->
>     <Connector port="8080" address="${jboss.bind.address}"
>          maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
>          enableLookups="false" redirectPort="8443" acceptCount="100"
>          connectionTimeout="20000" disableUploadTimeout="true" />
> 
>     <!-- A AJP 1.3 Connector on port 8009 -->
>     <Connector port="8009" address="${jboss.bind.address}"
>          enableLookups="false" redirectPort="8443" debug="0"
>          protocol="AJP/1.3" />
> 
>     <!-- A HTTPS Connector without client cert on port 8442 -->
>     <Connector port="8442" address="${jboss.bind.address}"
>          maxThreads="100" minSpareThreads="5" maxSpareThreads="15"
>          scheme="https" secure="true" clientAuth="false"
>          keystoreFile="${jboss.server.home.dir}/../../bin/tomcat.jks"
>          keystorePass="foo123" sslProtocol = "TLS" />
>     
>     <!-- HTTPS Connector requiring client cert on port 8443 -->
>     <Connector port="8443" address="${jboss.bind.address}"
>          maxThreads="100" minSpareThreads="5" maxSpareThreads="15"
>          scheme="https" secure="true" clientAuth="true"
>          keystoreFile="${jboss.server.home.dir}/../../bin/tomcat.jks"
>          keystorePass="foo123" sslProtocol = "TLS" />
> 
>     <Engine name="jboss.web" defaultHost="localhost">
> 
>       <Logger className="org.jboss.web.tomcat.Log4jLogger"
>           verbosityLevel="INFORMATION" 
>           category="org.jboss.web.localhost.Engine"/>
> 
>       <Realm className="org.jboss.web.tomcat.security.JBossSecurityMgrRealm"
>          subjectAttributeName="j_subject"
>          certificatePrincipal="org.jboss.security.auth.certs.SubjectDNMapping"
>          />
> 
>       <Host name="localhost" autoDeploy="false">
> 
>         <!-- Access logger -->
>         <!--
>         <Valve className="org.apache.catalina.valves.AccessLogValve"
>            prefix="localhost_access_log." suffix=".log"
>            pattern="common" directory="${jboss.server.home.dir}/log" 
>            resolveHosts="false" />
>         -->
> 
>         <!-- Uncomment to enable single sign-on across web apps
>         deployed to this host.
>         <Valve className="org.apache.catalina.authenticator.SingleSignOn"
>            debug="0"/>
>         -->
>          
>          <!-- Check for unclosed connections -->
>         <Valve className="org.jboss.web.tomcat.tc5.jca.CachedConnectionValve"
>             cachedConnectionManagerObjectName="jboss.jca:service=CachedConnectionManager" />
> 
>         <!-- Default context parameters -->
>         <DefaultContext cookies="true" crossContext="true" override="true" />
> 
>       </Host>
> 
>     </Engine>
> 
>   </Service>
> 
> </Server>