https://issues.apache.org/bugzilla/show_bug.cgi?id=48158
Summary: warn that "per directory client certificate
authentication" is harmful
Product: Tomcat 5
Version: Unknown
Platform: All
OS/Version: All
Status: NEW
Severity: critical
Priority: P2
Component: Connector:Coyote
AssignedTo: dev@tomcat.apache.org
ReportedBy: hau...@acm.org
in
http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html#Miscellaneous%20Tips%20and%20Bits
1) put a warning that not using clientAuth=false and using
<url-pattern>/something</url-pattern> is harmful
2) describe how to turn off TLS re-negotiation
see also Bug 48157 and Bug 34643 and
http://forums.sun.com/thread.jspa?messageID=10857837
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
