How do I access client certs from a servlet? I have installed Apache 1.3.9+mod_ssl+Tomcat 3.1. I need to know two things: a) In order to ask a x509 digital certificate to the user I have added the following lines on the httpd.conf SSLVerifyClient require SSLVerifyDepth 1 SSLCACertificateFile conf/ssl.crt/MYCA.ca Is this correct? Why I need to put the certificate for the CA that has emited the digital certificate? Is there a way to accept any certificate from any CA and let my web application to accept it or not? b) How do I access client certs from a servlet? . I need to access it from a servlet to get some info from it. Cheers ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
