Re: Tomcat more tolerant to missing or expired client certificates

Antonio Albendiz wrote: If you configure tomcat server in SSL mode, you can say what to do. In your server.xml, at the ssl connector it says what to do with the users. If you configure with no authentication, all users can see all. If you say want I think it says what to do with the user and if

Tomcat more tolerant to missing or expired client certificates

Hi, I am developing an application where I managed to use client authentication requiring a certificate installed in the browser. I have remarked anyway that when a certificate is expired or there is no certificate at all, Tomcat doesn't allow the user to use the application. This is right af

allow HTTPS connection only to some contexts

Hello, I have configured a Tomcat 4.1.12 installation to accept connections both by HTTP and by HTTPS. Now I can access my webapps by both protocols. I would like to allow some contexts to be accessed only by HTTP and not by HTTPS and other contexts to be accessed by HTTPS and not by HTTP. Am I ob