Re: [PATH] for problems with HTTPS and client certs

2001-10-19 Thread Stefan Wengi
jean-frederic clere wrote: > > Stefan Wengi wrote: > > > > Hey, > > > > here are the changes to get the HTTPS connector doing 'clientAuth' with > > CA certs other than the ones from Verisign and Thawte. I tested it with > > Netscape 4.77 as client and with certificates created by my own CA. > > >

Re: [PATH] for problems with HTTPS and client certs

2001-10-19 Thread jean-frederic clere
Stefan Wengi wrote: > > Hey, > > here are the changes to get the HTTPS connector doing 'clientAuth' with > CA certs other than the ones from Verisign and Thawte. I tested it with > Netscape 4.77 as client and with certificates created by my own CA. > > please consider integration into Tomcat 4

Re: [PATH] for problems with HTTPS and client certs

2001-10-18 Thread Stefan Wengi
Wolfgang, setting the 'trustStore' on the command line got it to work here too. What my patch does is setting the 'keystoreFile' (as set in the server.xml) as trustStore. We might want to consider adding two new config attributes 'truststoreFile' and 'truststorePasswd' and making the integratio

Re: [PATH] for problems with HTTPS and client certs

2001-10-18 Thread Wolfgang Hoschek
Starting TC 4.0 with CATALINA_OPTS="$CATALINA_OPTS -Djavax.net.ssl.trustStore=$CATALINA_BASE/conf/spitfire-cacerts.jks -Djavax.net.ssl.trustStorePassword=changeit" and using non-{Verisign,Thawte} cacerts, i am not seeing your problem with the standard SSLServerSocketFactory. Why does your pat