RE: Getting Server's certificate form an axis client

[Bill Kuker]

Thanks, I can use that on the server end of things, but I am confised as
to how I'd use this in a client. Isn't the HTTPServletRequest something
I'd be getting from my servlet container on the server side?

I am the client, I am connecting to a server, and I need to see the cert
the server sent to me.

Thanks,

-Bill Kuker


> -Original Message-
> From: Christopher S. Johnson [mailto:[EMAIL PROTECTED]
> Sent: Monday, October 03, 2005 3:41 PM
> To: axis-user@ws.apache.org
> Subject: Re: Getting Server's certificate form an axis client
> 
> Bill -
> 
> I'm not sure about doing this is C but for java see the following
thread..
> 
> http://marc.theaimsgroup.com/?l=axis-user&m=112497369029586&w=2
> 
> Same idea for C, grab the request then the certificate.
> 
> Regards
> ..Chris
> 
> 
> On Mon, 3 Oct 2005, Bill Kuker wrote:
> 
> >
> > I am writing a SOAP client using Axis. I have it connecting to a
server
> > with SSL no problem, and it is sending the client certificate to the
> > server and checking the server's certificate against my trust store.
No
> > problems.
> >
> > I want to verify WHICH trusted cert was used to verify the server,
and
> > get information from the server's cert. (the DN mainly). I need to
do
> > this before I send the actual request to the server, as the request
> > contains sensitive information.
> >
> > Any suggestions? I am used to the C libraries where I can provide my
own
> > verification callback.
> >
> > Thanks,
> >
> > -Bill Kuker
> >
> >
> >
> 
> --
> Chris Johnson
> [EMAIL PROTECTED]

Re: Getting Server's certificate form an axis client

[Christopher S. Johnson]

Bill -

I'm not sure about doing this is C but for java see the following thread..

http://marc.theaimsgroup.com/?l=axis-user&m=112497369029586&w=2

Same idea for C, grab the request then the certificate.

Regards
..Chris


On Mon, 3 Oct 2005, Bill Kuker wrote:

>
> I am writing a SOAP client using Axis. I have it connecting to a server
> with SSL no problem, and it is sending the client certificate to the
> server and checking the server's certificate against my trust store. No
> problems.
>
> I want to verify WHICH trusted cert was used to verify the server, and
> get information from the server's cert. (the DN mainly). I need to do
> this before I send the actual request to the server, as the request
> contains sensitive information.
>
> Any suggestions? I am used to the C libraries where I can provide my own
> verification callback.
>
> Thanks,
>
> -Bill Kuker
>
>
>

--
Chris Johnson
[EMAIL PROTECTED]