So I have now setup my Tomcat 5.5 with HTTPS via APR (tcnative-1.dll)/OpenSSL.

It works great.

Now I want to require SSL authenification.

Thats easy enough to do, I just enable SSLVerifyClient.

<Connector port="443" maxHttpHeaderSize="8192"
          maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
          enableLookups="false" disableUploadTimeout="true"
          acceptCount="100" scheme="https" secure="true"
          SSLEngine="on"
          SSLVerifyClient="require"
          SSLCertificateFile="${catalina.base}/conf/192.168.168.79.crt"
SSLCertificateKeyFile="${catalina.base}/conf/192.168.168.79.key" />


Now of course my Browser is broken.

I've downloaded a personal email certificate from Thawte and installed in Firefox.......but I don't get, how do I install the certificate into OpenSSL. Can anyone help here? Or is this only possible via the
Java Keystore?

Also how do get the certificates out of Firefox / internet explorer?

Thanks alot

Martin

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to