No, I do not mean transport CONFIDENTIAL, I mean client certificate authentication (CLIENT-CERT).
I.e. one servlet can be accesses only by a client with certain certificate (CLIENT-CERT) method, and another servlet accessed by user:password (FORM). The servlet accessed by the CLIENT-CERT method is in fact accessed just by a Java Swing application, not by the browser. So I think I may code some solution, like that the Java app will send certificate in POST data. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4239626#4239626 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4239626 _______________________________________________ jboss-user mailing list jboss-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/jboss-user