https://issues.apache.org/bugzilla/show_bug.cgi?id=48158
Summary: warn that "per directory client certificate
authentication" is harmful
Product: Tomcat 5
Version: Unknown
Platform: All
OS/Version: All
Status: NEW
Severity: critical
Priority: P2
Component: Connector:Coyote
AssignedTo: [email protected]
ReportedBy: [email protected]
in
http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Miscellaneous%20Tips%20and%20Bits
1) put a warning that not using clientAuth=false and using
<url-pattern>/something</url-pattern> is harmful
2) describe how to turn off TLS re-negotiation
see also Bug 48157 and Bug 34643 and
http://forums.sun.com/thread.jspa?messageID=10857837
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
