Re: ssl authentication by certificate

2004-01-07 Thread Ortwin Glück


Lionel PASQUIER wrote:

Well... I successfully connected to a https server that does not require certificate with httpClient: the ssl guide explain very well how to do this. But I did not spot anything about client authentication 
There is not much.

Maybe I am blind, but I need help! :) 

Is it in the SSLContext.init() that I should specify a KeyManager that I implemented? How do httpClient handles it? what calls does it do to the KeyManager?
HttpClient just calls the SecureSocketFactory. You can write your own 
and setup the Socket properly, configure your client certificates and so 
on. Please also have a look at the contributed code (only in the Source 
distribution in the src/contrib directory) or available in CVS online here:

http://cvs.apache.org/viewcvs.cgi/jakarta-commons/httpclient/src/contrib/org/apache/commons/httpclient/contrib/ssl/

(URL may be wrapped)

HTH

Odi

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


RE: ssl authentication by certificate

2004-01-07 Thread Lionel PASQUIER
Well... I successfully connected to a https server that does not require certificate 
with httpClient: the ssl guide explain very well how to do this. But I did not spot 
anything about client authentication 

Maybe I am blind, but I need help! :) 

Is it in the SSLContext.init() that I should specify a KeyManager that I implemented? 
How do httpClient handles it? what calls does it do to the KeyManager?



> -Message d'origine-
> De : Ortwin Glück [mailto:[EMAIL PROTECTED]
> Envoyé : mercredi 7 janvier 2004 11:23
> À : Commons HttpClient Project
> Objet : Re: ssl authentication by certificate
> 
> 
> Lionel PASQUIER wrote:
> > Hello and Happy New Year!
> 
> Thanks, same to you...
> 
> > I was just curious to know if httpClient supports ssl 
> authentication with certificate and private key?
> > 
> > That is I want to use httpClient to connect to a web site 
> with my private key / certificate from a keystore.
> > Is it possible?
> > 
> > I could not find a word about it in the docs...
> > 
> > Sorry if the question is dumb
> > 
> > Lionel
> 
> 
> Please have a look at our SSL Guide: 
> http://jakarta.apache.org/commons/httpclient/sslguide.html
> 
> Client certificates are a feature of your SSL implementation and are 
> thus not directly covered there. But there are quite a few 
> people that 
> use HttpClient with client certificates subscribed to this list.
> 
> HTH
> 
> Odi
> -- 
>   _
>   NOSE applied intelligence ag
> 
>   ortwin glück  [www]  http://www.nose.ch
>   software engineer [email] [EMAIL PROTECTED]
>   hardturmstrasse 171   [pgp key]  0x81CF3416
>   8005 zürich   [office]  +41-1-277 57 35
>   switzerland   [fax] +41-1-277 57 12
> 
> 
> -
> To unsubscribe, e-mail: 
> [EMAIL PROTECTED]
> For additional commands, e-mail: 
> [EMAIL PROTECTED]
> 
> 

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: ssl authentication by certificate

2004-01-07 Thread Ortwin Glück
Lionel PASQUIER wrote:
Hello and Happy New Year!
Thanks, same to you...

I was just curious to know if httpClient supports ssl authentication with certificate and private key?

That is I want to use httpClient to connect to a web site with my private key / 
certificate from a keystore.
Is it possible?
I could not find a word about it in the docs...

Sorry if the question is dumb

Lionel


Please have a look at our SSL Guide: 
http://jakarta.apache.org/commons/httpclient/sslguide.html

Client certificates are a feature of your SSL implementation and are 
thus not directly covered there. But there are quite a few people that 
use HttpClient with client certificates subscribed to this list.

HTH

Odi
--
 _
 NOSE applied intelligence ag
 ortwin glück  [www]  http://www.nose.ch
 software engineer [email] [EMAIL PROTECTED]
 hardturmstrasse 171   [pgp key]  0x81CF3416
 8005 zürich   [office]  +41-1-277 57 35
 switzerland   [fax] +41-1-277 57 12
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]


ssl authentication by certificate

2004-01-07 Thread Lionel PASQUIER
Hello and Happy New Year!

I was just curious to know if httpClient supports ssl authentication with certificate 
and private key?

That is I want to use httpClient to connect to a web site with my private key / 
certificate from a keystore.
Is it possible?

I could not find a word about it in the docs...

Sorry if the question is dumb

Lionel

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]