Hi Yogesh,

Thank you for the helpful information. Would you like to add this to
the website yourself? Our website is just a wiki. If you look on the
right you'll see an "Edit Page" link where you can actually add
information yourself.

Cheers,
Dan

On 12/28/06, Yogesh Chawla - PD <[EMAIL PROTECTED]> wrote:
Hello All,
After reading this entry in the user guide on writing
a client using HTTPS, I think it could be extended:

http://xfire.codehaus.org/HTTP+Transport

Currently the code allows for the user to establish an
HTTPS connection with the server, but I think does not
account for sending a client certificate for mutual
authentication.

You can add this code:

key = new KeyMaterial(new
File("/home/yogesh/yogesh.key"), keyStorePass);
protocolSocketFactory.setKeyMaterial(key);

Now it will verify that the server cert is in the
truststore based on the original code.  In addition it
will also send a client certificate from the
'yogesh.key' java keystore.

I did this and was able to do mutual authentication
using Xfire, Jaxb, and X509 certs.  Hopefully 'not yet
commons ssl' will become part of the commons http
client distribution soon.

Cheers,
Yogesh

---------------------------------------------------------------------
To unsubscribe from this list please visit:

    http://xircles.codehaus.org/manage_email




--
Dan Diephouse
Envoi Solutions
http://envoisolutions.com | http://netzooid.com/blog

---------------------------------------------------------------------
To unsubscribe from this list please visit:

   http://xircles.codehaus.org/manage_email

Reply via email to