"Jose Correia (J)" wrote:
> 
> [...]
> On my Java side I'm using JSSE 1.0.3 together with Innovation's
> HTTPClient like:

That's probably your problem.  I tried to get a Java/JSSE client
to do client-side authentication with a C/OpenSSL server recently
and couldn't get it to work.  I posted a query here and on our
local Java newsgroup and got zero responses from anybody who had
client-side authentication working with a JSSE client talking to
any sort of OpenSSL-based server.  Eric Rescorla suggested that 
I look at the PureTLS package that he wrote under contract for 
Claymore Systems.  I did, and it works.  

A Google search will point you to PureTLS.  It doesn't compile under
JDK 1.4, but you can build it under 1.3 and then use it with other
code built with 1.4.  That's what we did, and we're now busy solving
the customer's problem rather than trying to make our code work.

> [...]
> --- "Jose Correia (J)" <[EMAIL PROTECTED]> wrote:
> > Hi all
> >
> > Is anyone aware of Apache version 1.3.20 having problems with client
> > authentication??
> > [...]

Apache is not likely the problem, unless there's a configuration
error.  You can verify this by watching a connection attempt with
ssldump.  If you see Apache requesting a client cert, but the client
doesn't send one, the problem is likely with the client.

Good luck!

Paul Allen
-- 
Boeing Phantom Works                   \ Paul L. Allen, (425) 865-3297
Math & Computing Technology              \ [EMAIL PROTECTED]
POB 3707 M/S 7L-40, Seattle, WA 98124-2207 \ Prototype Systems Group
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to