jean-frederic clere wrote:
>
> Stefan Wengi wrote:
> >
> > Hey,
> >
> > here are the changes to get the HTTPS connector doing 'clientAuth' with
> > CA certs other than the ones from Verisign and Thawte. I tested it with
> > Netscape 4.77 as client and with certificates created by my own CA.
> >
>
Stefan Wengi wrote:
>
> Hey,
>
> here are the changes to get the HTTPS connector doing 'clientAuth' with
> CA certs other than the ones from Verisign and Thawte. I tested it with
> Netscape 4.77 as client and with certificates created by my own CA.
>
> please consider integration into Tomcat 4
Wolfgang,
setting the 'trustStore' on the command line got it to work here too.
What my patch does is setting the 'keystoreFile' (as set in the
server.xml) as trustStore.
We might want to consider adding two new config attributes
'truststoreFile' and 'truststorePasswd' and making the integratio
Starting TC 4.0 with
CATALINA_OPTS="$CATALINA_OPTS
-Djavax.net.ssl.trustStore=$CATALINA_BASE/conf/spitfire-cacerts.jks
-Djavax.net.ssl.trustStorePassword=changeit"
and using non-{Verisign,Thawte} cacerts, i am not seeing your problem with
the standard SSLServerSocketFactory. Why does your pat