Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-10 Thread dmccrthy
PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 1/8/15 6:21 PM, Caldarale, Charles R wrote: From: dmccrthy [mailto:dmccr...@gmail.com] Subject: Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections I found the link below from 2008

Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-09 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 1/8/15 6:21 PM, Caldarale, Charles R wrote: From: dmccrthy [mailto:dmccr...@gmail.com] Subject: Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections I found

Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 1/8/15 5:07 PM, André Warnier wrote: dmccrthy wrote: Chris, André, Many thanks. I hadn't considered either the MITM or Apache HTTPD angles. The proxy idea occurred to me (sorry, I had a typo in my original mail and that may not

Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Chuck, On 1/8/15 6:21 PM, Caldarale, Charles R wrote: From: dmccrthy [mailto:dmccr...@gmail.com] Subject: Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections I found the link below from

RE: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-08 Thread dmccrthy
...@unisys.com wrote: From: dmccrthy [mailto:dmccr...@gmail.com] Subject: Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections I found the link below from 2008. It looks like a minor change to the Catalina WebAppLoader class might solve

RE: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-08 Thread Caldarale, Charles R
From: dmccrthy [mailto:dmccr...@gmail.com] Subject: Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections I found the link below from 2008. It looks like a minor change to the Catalina WebAppLoader class might solve the problem and let

Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-08 Thread André Warnier
dmccrthy wrote: Chris, André, Many thanks. I hadn't considered either the MITM or Apache HTTPD angles. The proxy idea occurred to me (sorry, I had a typo in my original mail and that may not have been clear) but I agree it's messy. Many thanks again, I just couldn't find anything that said yes

Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-08 Thread dmccrthy
Hi André, Chris, Just to park the proxy idea for a moment, I found the link below from 2008. It looks like a minor change to the Catalina WebAppLoader class might solve the problem and let me provide a custom HTTPS URL protocol handler. Have I misread this?

Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-08 Thread dmccrthy
Chris, André, Many thanks. I hadn't considered either the MITM or Apache HTTPD angles. The proxy idea occurred to me (sorry, I had a typo in my original mail and that may not have been clear) but I agree it's messy. Many thanks again, I just couldn't find anything that said yes it can be done,

Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Diarmuid, On 1/8/15 8:51 AM, dmccrthy wrote: Is it possible to configure or hack Tomcat in some way to intercept outbound HTTP URL requests from a deployed web application and convert them to HTTPS with Mutual Authentication? Why not just do

Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-08 Thread André Warnier
dmccrthy wrote: Hi, Is it possible to configure or hack Tomcat in some way to intercept outbound HTTP URL requests from a deployed web application and convert them to HTTPS with Mutual Authentication? My scenario is: * 3rd party web application that makes client invocations to a server that

Re: Tomcat 7.0.56 - How to configure Tomcat/JRE 7u72 for client HTTPS Mutual Authentication connections

2015-01-08 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 André, On 1/8/15 9:52 AM, André Warnier wrote: dmccrthy wrote: Hi, Is it possible to configure or hack Tomcat in some way to intercept outbound HTTP URL requests from a deployed web application and convert them to HTTPS with Mutual