Re: Tomcat client certicate authentication

2023-02-01 Thread Christopher Schultz
Dave, On 2/1/23 06:17, Dave Breeze wrote: Chris thanks for your mail Apologies for confusion. Yes I am requesting certificates - sslCon.setProperty("clientAuth", "required") and a user can only connect by supplying a valid certificate. I removed constraints from the web.xml as I did not want

AW: Tomcat client certicate authentication

2023-02-01 Thread Thomas Hoffmann (Speed4Trade GmbH)
Hello Dave, > -Ursprüngliche Nachricht- > Von: Dave Breeze > Gesendet: Mittwoch, 1. Februar 2023 12:17 > An: Tomcat Users List > Betreff: Re: Tomcat client certicate authentication > > Chris > thanks for your mail > Apologies for confusion. Yes I

Re: Tomcat client certicate authentication

2023-02-01 Thread Dave Breeze
Chris thanks for your mail Apologies for confusion. Yes I am requesting certificates - sslCon.setProperty("clientAuth", "required") and a user can only connect by supplying a valid certificate. I removed constraints from the web.xml as I did not want access to a servlet restricted to a role - I

Re: Tomcat client certicate authentication

2023-01-30 Thread Christopher Schultz
Dave, On 1/30/23 04:21, Dave Breeze wrote: Thanks Chris the application is requesting certificate authentication - and this is working - it is just the mapping of users to roles that is not happening No, the server is requesting the certificate information; the application is not. From your

Re: Tomcat client certicate authentication

2023-01-30 Thread Dave Breeze
Thanks Chris the application is requesting certificate authentication - and this is working - it is just the mapping of users to roles that is not happening I implemented an org.apache.catalina.realm.X509UsernameRetriever and configured using X509UsernameRetrieverClassName but it was never

Re: Tomcat client certicate authentication

2023-01-29 Thread Christopher Schultz
Dave, On 1/28/23 09:28, Dave Breeze wrote: this is Tomcat 9.0 running embedded I am trying to authorize access by client certificate. I want the servlet response to be tailored to the user's role. In other words I am not looking to deny access by role. The connector has

Tomcat client certicate authentication

2023-01-28 Thread Dave Breeze
hi this is Tomcat 9.0 running embedded I am trying to authorize access by client certificate. I want the servlet response to be tailored to the user's role. In other words I am not looking to deny access by role. The connector has sslCon.setProperty("clientAuth", "required"); The context has a