Re: Getting Server's certificate form an axis client

2005-10-03 Thread Christopher S. Johnson 
Bill -

I'm not sure about doing this is C but for java see the following thread..

http://marc.theaimsgroup.com/?l=axis-userm=112497369029586w=2

Same idea for C, grab the request then the certificate.

Regards
..Chris


On Mon, 3 Oct 2005, Bill Kuker wrote:


 I am writing a SOAP client using Axis. I have it connecting to a server
 with SSL no problem, and it is sending the client certificate to the
 server and checking the server's certificate against my trust store. No
 problems.

 I want to verify WHICH trusted cert was used to verify the server, and
 get information from the server's cert. (the DN mainly). I need to do
 this before I send the actual request to the server, as the request
 contains sensitive information.

 Any suggestions? I am used to the C libraries where I can provide my own
 verification callback.

 Thanks,

 -Bill Kuker




--
Chris Johnson
[EMAIL PROTECTED]

RE: Getting Server's certificate form an axis client

2005-10-03 Thread Bill Kuker 
Thanks, I can use that on the server end of things, but I am confised as
to how I'd use this in a client. Isn't the HTTPServletRequest something
I'd be getting from my servlet container on the server side?

I am the client, I am connecting to a server, and I need to see the cert
the server sent to me.

Thanks,

-Bill Kuker


 -Original Message-
 From: Christopher S. Johnson [mailto:[EMAIL PROTECTED]
 Sent: Monday, October 03, 2005 3:41 PM
 To: axis-user@ws.apache.org
 Subject: Re: Getting Server's certificate form an axis client
 
 Bill -
 
 I'm not sure about doing this is C but for java see the following
thread..
 
 http://marc.theaimsgroup.com/?l=axis-userm=112497369029586w=2
 
 Same idea for C, grab the request then the certificate.
 
 Regards
 ..Chris
 
 
 On Mon, 3 Oct 2005, Bill Kuker wrote:
 
 
  I am writing a SOAP client using Axis. I have it connecting to a
server
  with SSL no problem, and it is sending the client certificate to the
  server and checking the server's certificate against my trust store.
No
  problems.
 
  I want to verify WHICH trusted cert was used to verify the server,
and
  get information from the server's cert. (the DN mainly). I need to
do
  this before I send the actual request to the server, as the request
  contains sensitive information.
 
  Any suggestions? I am used to the C libraries where I can provide my
own
  verification callback.
 
  Thanks,
 
  -Bill Kuker
 
 
 
 
 --
 Chris Johnson
 [EMAIL PROTECTED]