Re: client authentication with client certificates (ssl)

2005-06-02 Thread Paul Puschmann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mark Thomas wrote: Paul Puschmann wrote: we'd like to use our Tomcat with ssl and client certificates. Does anybody know if the user information (of the user-certificate) can be used to authenticate? Tomcat is 5.5.7 CLIENT-CERT

Re: client authentication with client certificates (ssl)

2005-06-02 Thread Mark Thomas
Paul Puschmann wrote: That is fine, but how can I use the CLIENT-CERT information in my applications? The certificate is exposed as a servlet attribute. You need to read section SRV.4.7 of the servlet specification and if you search the specification for certificate you will find some useful

client authentication with client certificates (ssl)

2005-06-01 Thread Paul Puschmann
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, we'd like to use our Tomcat with ssl and client certificates. Does anybody know if the user information (of the user-certificate) can be used to authenticate? Tomcat is 5.5.7 Paul - -- Linux-User #271918 with the Linux Counter,

Re: client authentication with client certificates (ssl)

2005-06-01 Thread Mark Thomas
Paul, CLIENT-CERT authentication is supported. Mark Paul Puschmann wrote: we'd like to use our Tomcat with ssl and client certificates. Does anybody know if the user information (of the user-certificate) can be used to authenticate? Tomcat is 5.5.7