Hi,
I have tried setting up SSL authentication which works perfectly in one
direction but setting the needClientAuthentication is NOT requiring the
client to supply a certificate. I'm just using a browser as a client and it
goes through and displays the page without having to send any certificate:
<Note: commented lines are things I've tried to get it working but commented
out as they shouldn't be needed>
This has been tested on 2.1RC1 - I'm currently downloading 2.0 to see if it
worked back then and I've got the snapshot on the way down.. have I missed
something?
Note: serverkeystore.jks contains a server private/public keypair
servertruststore.jks contains client public certificate
Thanks! I'm new to SSL too so I might be barking up the wrong tree
//
parameters.add("sslContextFactory","org.restlet.ext.ssl.DefaultSslContextFactory");
parameters.add("keystorePath","d:/pathto/serverkeystore.jks");
parameters.add("keystorePassword", "password");
parameters.add("keyPassword", "password");
parameters.add("keystoreType","JKS");
// parameters.add("wantClientAuthentication","true");
parameters.add("needClientAuthentication","true");
parameters.add("truststorePath","d:/pathto/servertruststore.jks");
parameters.add("truststorePassword", "password");
parameters.add("truststoreType","JKS");
--
Sean
--
View this message in context:
http://restlet-discuss.1400322.n2.nabble.com/SSL-needClientAuthentication-not-working-tp7045620p7045620.html
Sent from the Restlet Discuss mailing list archive at Nabble.com.
------------------------------------------------------
http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2889195