How about use web.xml to configure your security rather than doing it by hand? That way tomcat does all the hard work.
Mark > -----Original Message----- > From: SH Solutions [mailto:[EMAIL PROTECTED] > Sent: Tuesday, May 25, 2004 10:37 PM > To: 'Tomcat Users List' > Subject: HTTP AUTH > > Hi > > I managed to set up HTTP BASIC AUTH using the following: > > HttpServletResponse response = request.getResponse(); > response.setStatus( 401 ); > response.setHeader( "WWW-Authenticate", "BASIC > realm=\"realm\"" ); > > Now I want to go a step further and implement certificate > authentification. > Can someone give me a hint? > > Obviously I need to send something else than BASIC and a bit more. > But I need a place to start... > > Regards, > Steffen > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]