Re: Regression in mutual authentication in 9.0.86+?

2024-03-21 Thread Mark Thomas
4:41 AM To: users@tomcat.apache.org Subject: Re: Regression in mutual authentication in 9.0.86+? CAUTION: This email originated from outside the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you believe this is a phishing

RE: Regression in mutual authentication in 9.0.86+?

2024-03-21 Thread Amit Pande
round the awesome Tomcat leads. Thanks, Amit -Original Message- From: Mark Thomas Sent: Monday, March 18, 2024 4:41 AM To: users@tomcat.apache.org Subject: Re: Regression in mutual authentication in 9.0.86+? CAUTION: This email originated from outside the organization. Do not click

Re: Regression in mutual authentication in 9.0.86+?

2024-03-18 Thread Mark Thomas
I've just tested 9.0.x and mutual TLS authentication appears to be working as expected. I suggest starting with testing a simple JSP that echoes that attribute and if you still see the issue, provide us with your configuration. Note that the issue may be related to the certs you are using so t

Regression in mutual authentication in 9.0.86+?

2024-03-14 Thread Amit Pande
Hello all, I have upgraded the Tomcat version from 9.0.85 to 9.0.86 (and tried with 9.0.87 too). Some of our tests which involve on mutual authentication ("certificateVerification = optional") have started to fail. In tests where the client does pass the certificate, I didn't see any SSL hand