Re: [External] Re: Client Certificates

2023-07-24 Thread Christopher Schultz
Robert, On 7/20/23 15:43, Robert Egan wrote: I suspect the problem is occurring before I can see the certificate, because the only way the request even reaches my filter is when the is set to auth="none". I have been pulled away from this project for now, but thanks for the answers. If you w

Re: [External] Re: Client Certificates

2023-07-20 Thread Robert Egan
I suspect the problem is occurring before I can see the certificate, because the only way the request even reaches my filter is when the is set to auth="none". I have been pulled away from this project for now, but thanks for the answers. Robert Egan -- *VSolvit LLC*, *CMMI (Level 3), ISO 9001,

Re: Client Certificates

2023-07-17 Thread Christopher Schultz
Tim, On 7/17/23 10:58, Timothy Ward wrote: Here is a filter that I am using to get the client certificates, the issue I'm having is passing them along via the headers so they can be picked up as CGI Environment Variables down the road. This does get me the certificate information though. Just

Re: Client Certificates

2023-07-17 Thread Timothy Ward
Here is a filter that I am using to get the client certificates, the issue I'm having is passing them along via the headers so they can be picked up as CGI Environment Variables down the road. This does get me the certificate information though. Just ignor the mutableRequest stuff as that is what

Re: Client certificates not authenticated by realm

2014-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Andrew, On 12/1/14 4:32 PM, Andrew Gronosky wrote: > Problem solved. > > The issue was tomcat-users.xml should contain the client's CN as > the user name, like this: > >username="CN=client1, OU=Application Development, O=GoSmarter, > L=Bangal

Re: Client certificates not authenticated by realm

2014-12-01 Thread Andrew Gronosky
Problem solved. The issue was tomcat-users.xml should contain the client's CN as the user name, like this: So Chris was definitely on the right track when he (I assume, maybe incorrectly, "Chris" is male) inquired about the CNs in my client certs. Thanks again, Chris! -Andrew Gronosk

Re: Client certificates not authenticated by realm

2014-12-01 Thread Andrew Gronosky
On 2014-12-01 15:14, Christopher Schultz wrote: What do the CNs look like for your client certs? - -chris Hi Chris, Thanks for the very quick reply! For the testClient_2 client cert, the CN is: Owner: CN=testClient_2, OU=ATAK, O=BBN, L=Cambridge, ST=MA, C=US Issuer: CN=marti-ca, O=BBN, L=C

Re: Client certificates not authenticated by realm

2014-12-01 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Andrew, On 12/1/14 2:33 PM, Andrew Gronosky wrote: > Hello, > > I am trying to set up client-certificate authentication for Tomcat > 7.0.57. I have read the basics in the docs and I have my > configuration working up to a point. > > My problem is