Re: Authenticate with X509 certification

2008-06-09 Thread Andreas Huelsing
Thanks, and sorry for my poor english. I do my best. Regards, Luis Andreas Huelsing escribió: Ok, you know, that you have to use ssl/tsl or some challenge-response protocol to ensure that the owner of the certificate also owns the corresponding private key? So the best way might be to us

Re: Authenticate with X509 certification

2008-06-09 Thread Andreas Huelsing
Ok, you know, that you have to use ssl/tsl or some challenge-response protocol to ensure that the owner of the certificate also owns the corresponding private key? So the best way might be to use ssl with client auth and an all trusting trustmanager which accepts every certificate but checks

Custom SSL client auth

2008-05-29 Thread Andreas Huelsing
Hi there, i have to use SSL with client auth for my webservice running on tomcat 5.5 using axis2. The Problem is, that i have to validate the client certificates using some customized classes. I tried to write a custome TrustManager, TrustManagerFactory and a Provider returning registering (