how to set up client certificate in restlet 1.1.4 for HTTPS?

2009-12-16 Thread webpost
Hi, I'm trying to use the Simple HTTPS library to set up a HTTPS connection with mutual PKI authentication, after successful server-only authentication. For the server-only authentication, I created a JKS keystore and modified the client/server samples in

Re: how to set up client certificate in restlet 1.1.4 for HTTPS?

2009-12-16 Thread Matt Kennedy
Here's the server code I use, my keys/certs may be set up a little differently from yours though, but this code supports client cert handshakes using browser clients and curl clients. In this case, the CAs that sign the client certs are stored in /etc/pki/ca.jks along with the CA that signed that

Re: how to set up client certificate in restlet 1.1.4 for HTTPS?

2009-12-16 Thread Bruno Harbulot
Hi, Using client-certificates with Restlet 1.1 is not well supported (in fact, it's not supported at all, but there are workarounds to make it work in some cases). I'd suggest upgrade to Restlet 2; there might still be bugs with some connectors, but the Apache HTTP client and the Net

RE: how to set up client certificate in restlet 1.1.4 for HTTPS?

2009-12-16 Thread webpost
I found a way to work around this, after some searching and testing. The workaround is to use the SAME password for both keystore and its key, i.e. keytool -keypass and -storepass shoud have the same arg. After that, the following code will work on the client side (there is no change to the