Hi
On 05/05/14 20:32, Jose María Zaragoza wrote:
Hello:

I've got 2 basic questions about client-cert authentication:

1) According CXF documentation , I can set

<sec:keyManagers keyPassword="password">
         <sec:keyStore type="JKS" password="password"
                       file="my/file/dir/Morpit.jks"/>
</sec:keyManagers>

What is the keyPassword in sec:keyManagers element for ?
I believe it corresponds to a Java keytool "-keyPasswd" option


2)

If I've got many client-certs in the same .jks file , how I can select
the right client-cert to use ?
Should I create different keystore for implementing this ?

See http://cxf.apache.org/docs/tls-configuration.html,
looks like a 'certAlias' option can help

HTH, Sergey


Thanks and regards



Reply via email to