"Jose Correia (J)" wrote: > > [...] > On my Java side I'm using JSSE 1.0.3 together with Innovation's > HTTPClient like:
That's probably your problem. I tried to get a Java/JSSE client to do client-side authentication with a C/OpenSSL server recently and couldn't get it to work. I posted a query here and on our local Java newsgroup and got zero responses from anybody who had client-side authentication working with a JSSE client talking to any sort of OpenSSL-based server. Eric Rescorla suggested that I look at the PureTLS package that he wrote under contract for Claymore Systems. I did, and it works. A Google search will point you to PureTLS. It doesn't compile under JDK 1.4, but you can build it under 1.3 and then use it with other code built with 1.4. That's what we did, and we're now busy solving the customer's problem rather than trying to make our code work. > [...] > --- "Jose Correia (J)" <[EMAIL PROTECTED]> wrote: > > Hi all > > > > Is anyone aware of Apache version 1.3.20 having problems with client > > authentication?? > > [...] Apache is not likely the problem, unless there's a configuration error. You can verify this by watching a connection attempt with ssldump. If you see Apache requesting a client cert, but the client doesn't send one, the problem is likely with the client. Good luck! Paul Allen -- Boeing Phantom Works \ Paul L. Allen, (425) 865-3297 Math & Computing Technology \ [EMAIL PROTECTED] POB 3707 M/S 7L-40, Seattle, WA 98124-2207 \ Prototype Systems Group ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]