Re: Tomcat 6 client auth. by certificate

2007-10-03 Thread Filip Hanik - Dev Lists
I assume that the trust store contains a certificate that matches the one of the browser, if not, then you can't do client-auth try doing it with a java client first so that you can see how it works, Filip Hassan Schroeder wrote: On 10/3/07, damovsky <[EMAIL PROTECTED]> wrote: In server.x

Re: Tomcat 6 client auth. by certificate

2007-10-03 Thread Hassan Schroeder
On 10/3/07, damovsky <[EMAIL PROTECTED]> wrote: > In server.xml I have SSLEnabled="true", of course. So what do your logs say about Connector startup? -- Hassan Schroeder [EMAIL PROTECTED] - To start a

RE: Tomcat 6 client auth. by certificate

2007-10-03 Thread damovsky
Caldarale, Charles R wrote: > >> It is not working with param sslenabled="true" :-( > > It's SSLEnabled, not sslenabled (case matters); are you just being > sloppy with the e-mail, or did you spell it incorrectly in the XML? > > - Chuck > In server.xml I have SSLEnabled="true", of course. -

RE: Tomcat 6 client auth. by certificate

2007-10-03 Thread Caldarale, Charles R
> From: damovsky [mailto:[EMAIL PROTECTED] > Subject: Re: Tomcat 6 client auth. by certificate > > Yes, i have the truststoreFile and keystore file in webapps > directory. The point was that may not be the most secure location for them. Putting them in conf or a subdirector

Re: Tomcat 6 client auth. by certificate

2007-10-03 Thread damovsky
Hassan Schroeder-2 wrote: > > On 10/2/07, damovsky wrote: >> > maxSpareThreads="75" >> enableLookups="true" disableUploadTimeout="true" >> acceptCount="100" protocol="HTTP/1.1" scheme="https" secure="true" >> sslProtocol="TLS" > > I believe you need to add > SSLEnabled="true"

Re: Tomcat 6 client auth. by certificate

2007-10-03 Thread Hassan Schroeder
On 10/2/07, damovsky <[EMAIL PROTECTED]> wrote: > Then, I edit server.xml in tomcat and add this code: > >maxSpareThreads="75" > enableLookups="true" disableUploadTimeout="true" > acceptCount="100" protocol="HTTP/1.1" scheme="https" secure="true" > sslProtocol="TLS" I believe you need to add