How do I access client certs from a servlet?

I have installed Apache 1.3.9+mod_ssl+Tomcat 3.1.

I need to know two things:

a) In order to ask a x509 digital certificate to the user I have added
the following lines on the httpd.conf

SSLVerifyClient require
SSLVerifyDepth  1
SSLCACertificateFile conf/ssl.crt/MYCA.ca

Is this correct?
Why I need to put the certificate for the CA that has emited the digital
certificate? Is there a way to accept any certificate from any CA and
let my web application to accept it or not?


b) How do I access client certs from a servlet? . I need to access it
from a servlet to get some info from it.


Cheers

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to