Re: Two Way SSL - SSL Offloading at load balancer

2016-12-10 Thread Bipin Jethwani
*Thanks André. I will sure give it a try and update you. * *Meanwhile, my team seems to tilted toward a servlet filter or jersey hook to get this working at application layer.* *We got a public key inside of mobile app and corresponding private key on server side and we would be signing the respons

Re: Two Way SSL - SSL Offloading at load balancer

2016-12-08 Thread tomcat
On 02.12.2016 13:27, Bipin Jethwani wrote: We use Spring security and want to use Two Way SSL for a few Jersey based REST APIs exposed for mobile devices. SSL is offloaded at load-balancer or apache level. Can we still get access to client certificate at web app level? On second thought we can

RE: Two Way SSL - SSL Offloading at load balancer

2016-12-05 Thread Macca, Diego
...@christopherschultz.net] Sent: 02 December 2016 17:09 To: Tomcat Users List Subject: Re: Two Way SSL - SSL Offloading at load balancer -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bipin, On 12/2/16 7:27 AM, Bipin Jethwani wrote: > We use Spring security and want to use Two Way SSL for a few Jersey > base

Re: Two Way SSL - SSL Offloading at load balancer

2016-12-02 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Bipin, On 12/2/16 7:27 AM, Bipin Jethwani wrote: > We use Spring security and want to use Two Way SSL for a few Jersey > based REST APIs exposed for mobile devices. SSL is offloaded at > load-balancer or apache level. > > Can we still get access to

Re: Two Way SSL - SSL Offloading at load balancer

2016-12-02 Thread tomcat
On 02.12.2016 13:27, Bipin Jethwani wrote: We use Spring security and want to use Two Way SSL for a few Jersey based REST APIs exposed for mobile devices. SSL is offloaded at load-balancer or apache level. Can we still get access to client certificate at web app level? On second thought we can

Re: Two-way SSL setup as Tomcat as a client

2010-08-09 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Steve, On 8/7/2010 6:24 PM, Steve Johnson wrote: > I can confirm that the Apache HTTPClient module is a good way to go. > In fact, it works with zero configuration. You simply give it a normal > 'https' URL, and it does the right thing automagicall

Re: Two-way SSL setup as Tomcat as a client

2010-08-07 Thread Steve Johnson
input, Chuck. YF From: chuck.caldar...@unisys.com To: users@tomcat.apache.org Date: Sat, 7 Aug 2010 11:22:41 -0500 Subject: RE: Two-way SSL setup as Tomcat as a client From: yifeng wu [mailto:yifen...@hotmail.com] Subject: RE: Two-way SSL setup as Tomcat as a client I am refering two way SSL not

RE: Two-way SSL setup as Tomcat as a client

2010-08-07 Thread yifeng wu
com > To: users@tomcat.apache.org > Date: Sat, 7 Aug 2010 11:22:41 -0500 > Subject: RE: Two-way SSL setup as Tomcat as a client > > > From: yifeng wu [mailto:yifen...@hotmail.com] > > Subject: RE: Two-way SSL setup as Tomcat as a client > > > > I am refering t

RE: Two-way SSL setup as Tomcat as a client

2010-08-07 Thread Caldarale, Charles R
> From: yifeng wu [mailto:yifen...@hotmail.com] > Subject: RE: Two-way SSL setup as Tomcat as a client > > I am refering two way SSL not just one way. Irrelevant; Pid's statement still stands: it's your webapp, not Tomcat, that is trying to communicate with an external se

RE: Two-way SSL setup as Tomcat as a client

2010-08-07 Thread yifeng wu
t did take some configuration in webshpere side. Do anyone have similiar experience? Thanks, YF. > From: p...@pidster.com > Date: Fri, 6 Aug 2010 14:24:32 +0100 > Subject: Re: Two-way SSL setup as Tomcat as a client > To: users@tomcat.apache.org > > On 6 Aug 2010, at

Re: Two-way SSL setup as Tomcat as a client

2010-08-06 Thread Pid *
On 6 Aug 2010, at 13:12, yifeng wu wrote: > Hi, > > I am trying to make a call from Tomcat to another application server > (Websphere) and the communication channel is secured with two-way SSL. > I have been searching on the net for hours and cannot find the information > about how to setup tom

RE: Two-way SSL

2005-10-28 Thread Steinberger, Richard
Thanks Jim, You nailed it, this was the missing link. Rick -Original Message- From: James Rome [mailto:[EMAIL PROTECTED] Sent: Thursday, October 27, 2005 4:14 PM To: Steinberger, Richard Subject: Two-way SSL The client browser only presents certificates signed by a CA that the Server t