A client cert is only sent when requested by the server, so that makes this a Tomcat/apache issue, not an OpenSSL issue.
apps/s_client demo app supports transmission of client cert upon request (try this in conjunction with the apps/s_server OpenSSL demo app, for instance). Check out this: https://pkioverheid.gemnetcsp.nl/help/csr/tomcat.html and watch for the clientAuth setting being mentioned there. Also read the two-message thread here: http://coding.derkeiler.com/Archive/Java/comp.lang.java.programmer/2006-09/msg02322.html (click on 'next by thread' to see response) for some more info regarding the Tomcat side of things. HTH (hope This Helps), Ger On Thu, Jan 8, 2009 at 7:57 AM, lampa <lampa2...@gmail.com> wrote: > > I just want to know how to implement the bidirectional handshake process. > Thank you > Lampa > -- > View this message in context: > http://www.nabble.com/SSL-authentication-sample-tp21346740p21346755.html > Sent from the OpenSSL - User mailing list archive at Nabble.com. > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org > -- Met vriendelijke groeten / Best regards, Ger Hobbelt -------------------------------------------------- web: http://www.hobbelt.com/ http://www.hebbut.net/ mail: g...@hobbelt.com mobile: +31-6-11 120 978 -------------------------------------------------- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org