RE: Mutual certificate authentication between Tomcat and MS IIS

2017-01-24 Thread Macca, Diego
- From: Christopher Schultz [mailto:ch...@christopherschultz.net] Sent: 24 January 2017 17:06 To: Tomcat Users List Subject: Re: Mutual certificate authentication between Tomcat and MS IIS -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Diego, On 1/24/17 8:24 AM, Macca, Diego wrote: >

RE: Mutual certificate authentication between Tomcat and MS IIS

2017-01-25 Thread Macca, Diego
authentication between Tomcat and MS IIS -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Diago, On 1/24/17 4:41 PM, Christopher Schultz wrote: > Diago, > > On 1/24/17 11:40 AM, Macca, Diego wrote: >> On 1/24/17 8:24 AM, Macca, Diego wrote: >>>> Has somebody of you ever tried to c

Mutual certificate authentication between Tomcat and MS IIS

2017-01-24 Thread Macca, Diego
Dears, Has somebody of you ever tried to configure certificate mutual authentication between a MS IIS webserver and a Tomcat instance ? Does somebody know if this is even possible in IIS ? I usually do it very well with Apache but this time I'm requested to put in front of Tomcat an IIS

RE: Two Way SSL - SSL Offloading at load balancer

2016-12-05 Thread Macca, Diego
Hi all, Probably the FW can be configured to not terminate the SSL connection. It should act as a pass-through. But since few months we noticed that Tomcat is not requesting the client certificate anymore (Tomcat to Tomcat, the browsers always receive a certificate request). It complete the

RE: 2 Way SSL integration with Webservices - Inbound connection not trusted

2017-08-15 Thread Macca, Diego
Hi, You need to set clientAuth="true" in the connector or, for some reason unknown to me (probably something changed in Java from rel. 6/7 on), Tomcat will not enforce the 2 way ssl. You can see what is going on (certificates exchange) with an ssl debug. Kind Regards, Diego Macca Senior IT

RE: 2 Way SSL integration with Webservices - Inbound connection not trusted

2017-08-15 Thread Macca, Diego
on as required but application URL is not reachable and it was complaining about certificate. Can I set the truststore in SSLContext before making outbound call?.will it trust the client request. Let me enable SSL debug and check the log as well. Thanks Vinoth On Tuesday, August 15, 2017, Macca,