users@glassfish.java.net

Re: Certificate Revocation List (CRL) use in GlassFish v3

From: Kumar.Jayanti <Vbkumar.Jayanti_at_Sun.COM>
Date: Mon, 04 Oct 2010 18:41:01 +0530

  On 04/10/10 6:19 PM, Kumar.Jayanti wrote:
> On 01/10/10 11:24 PM, glassfish_at_javadesktop.org wrote:
>> I'd like to set up the CRL in my GlassFish v3.0.1(b22), however all the posts I am reading relate to GlassFish v.2.
>>
>> Would someone please tell me "where and how" in the GlassFish v3 domain.xml file I need to add the information to point to my CRL file? Also, how and where in the admin console can the same information be set?
> The same stuff as in V2 should work even though the structure of
> domain.xml has changed a bit w.r.t listeners.
>
> <protocol security-enabled="true" name="http-listener-2">
> <http default-virtual-server="server" max-connections="250">
> <file-cache></file-cache>
> </http>
> <ssl classname="com.sun.enterprise.security.ssl.GlassfishSSLImpl"
> ssl3-enabled="false" cert-nickname="s1as"></ssl>
> *<property name="crlFile"
> value="${com.sun.aas.instanceRoot}/config/crl.pem"/>*
> </protocol>
>
> I will reconfirm after checking with our QE... But please try this
> and let us know.
Ok.. ignore my previous message. It seems it should be crl-file
attribute inside <ssl> element.

<protocol security-enabled="true" name="http-listener-2">
<http default-virtual-server="server" max-connections="250">
<file-cache></file-cache>
</http>
<ssl classname="com.sun.enterprise.security.ssl.GlassfishSSLImpl"
ssl3-enabled="false" cert-nickname="s1as"
*crl-file="${com.sun.aas.instanceRoot}/config/crl.pem"*></ssl>
</protocol>

Do let us know if it is working.

regards,
kumar

>
> regards,
> kumar
>> Thanks, Eric
>> [Message sent by forum member 'eliscinsky']
>>
>> http://forums.java.net/jive/thread.jspa?messageID=484136
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail:users-unsubscribe_at_glassfish.dev.java.net
>> For additional commands, e-mail:users-help_at_glassfish.dev.java.net
>>
>