Thanks Chris for your comments.

Kind Regards,

Diego Macca
Senior IT Specialist

DG-IS/EDA - Executional Domain Applications
EUROPEAN CENTRAL BANK
Tel.: +49 (69) 1344 6991
E-mail: diego.ma...@ecb.europa.eu
www.ecb.europa.eu
www.youtube.com/ecbeuro
https://twitter.com/ecb

-----Original Message-----
From: Christopher Schultz [mailto:ch...@christopherschultz.net]
Sent: 24 January 2017 17:06
To: Tomcat Users List
Subject: Re: Mutual certificate authentication between Tomcat and MS IIS

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Diego,

On 1/24/17 8:24 AM, Macca, Diego wrote:
> Has somebody of you ever tried to configure certificate mutual
> authentication between a MS IIS webserver and a Tomcat instance ?

>>You want IIS to present a client certificate to Tomcat? Tomcat shouldn't have 
>>a problem with that.

Yes, that's what I need. Tomcat does not have any problem and it works well 
with Apache. It seems that IIS is not able to present the certificate when I 
configure it as reverse proxy (so when it should act as a client).

> Does somebody know if this is even possible in IIS ?

>>You'd have to configure IIS's HTTP proxy to use a client certificate.

Do you know how to configure it ? I mean, IIS does the reverse proxy things but 
I need it also to send the present to Tomcat.

> I usually do it very well with Apache but this time I'm requested to
> put in front of Tomcat an IIS webserver.

>>I'm sorry I can't help with this, but I'd be interested in hearing the 
>>solution. There are a number of people here who with with IIS. If nobody 
>>answers after a while, I'll see if I can find someone through $work who might 
>>be able to answer.

Thanks a lot.

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=Q7UB
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Any e-mail message from the European Central Bank (ECB) is sent in good faith, 
but shall neither be binding nor construed as constituting a commitment by the 
ECB except where provided for in a written agreement. This e-mail is intended 
only for the use of the recipient(s) named above. Any unauthorised disclosure, 
use or dissemination, either in whole or in part, is prohibited. If you have 
received this e-mail in error, please notify the sender immediately via e-mail 
and delete this e-mail from your system. The ECB processes personal data in 
line with Regulation (EC) No 45/2001 and Decision ECB/2007/1. For any further 
information you can consult the Data Protection Disclaimer on the ECB webpage. 
In case of queries, please contact the ECB Data Protection Officer 
(d...@ecb.europa.eu). You may also contact the European Data Protection 
Supervisor.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to