I assume that the trust store contains a certificate that matches the
one of the browser, if not, then you can't do client-auth
try doing it with a java client first so that you can see how it works,
Filip
Hassan Schroeder wrote:
On 10/3/07, damovsky <[EMAIL PROTECTED]> wrote:
In server.x
On 10/3/07, damovsky <[EMAIL PROTECTED]> wrote:
> In server.xml I have SSLEnabled="true", of course.
So what do your logs say about Connector startup?
--
Hassan Schroeder [EMAIL PROTECTED]
-
To start a
er.xml I have SSLEnabled="true", of course.
--
View this message in context:
http://www.nabble.com/Tomcat-6-client-auth.-by-certificate-tf4560099.html#a13025862
Sent from the Tomcat - User mailing list archive at Nabble.com.
-
> From: damovsky [mailto:[EMAIL PROTECTED]
> Subject: Re: Tomcat 6 client auth. by certificate
>
> Yes, i have the truststoreFile and keystore file in webapps
> directory.
The point was that may not be the most secure location for them.
Putting them in conf or a subdirector
>
> I don't think this is causing your problem, but putting those files
> under webapps feels like a really bad idea to me... :-)
>
> FWIW,
> --
> Hassan Schroeder [EMAIL PROTECTED]
>
Yes, i have the truststoreFile and keystore file in web
On 10/2/07, damovsky <[EMAIL PROTECTED]> wrote:
> Then, I edit server.xml in tomcat and add this code:
>
>maxSpareThreads="75"
> enableLookups="true" disableUploadTimeout="true"
> acceptCount="100" protocol="HTTP/1.1" scheme="https" secure="true"
> sslProtocol="TLS"
I believe you need to add
nabble.com/Tomcat-6-client-auth.-by-certificate-tf4560099.html#a13013691
Sent from the Tomcat - User mailing list archive at Nabble.com.
-
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROT