DO NOT REPLY [Bug 35229] - alert user about expired certificates in client cert authentication in an understandable way

2005-07-21 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 35229] - alert user about expired certificates in client cert authentication in an understandable way

2005-06-16 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bu

DO NOT REPLY [Bug 35229] New: - alert user about expired certificates in client cert authentication in an understandable way

2005-06-05 Thread bugzilla
gzilla/show_bug.cgi?id=35229 Summary: alert user about expired certificates in client cert authentication in an understandable way Product: Tomcat 5 Version: Nightly Build Platform: Other OS/Version: All Statu

Re: JDBCRealm CLIENT-CERT Authentication

2003-03-17 Thread Patrick Flohr
Hi, i use already the client-cert method and a suitable security-role. May i made a mistake during build? How can be ensured that tomcat make use of the new authenticate method? thanks Patrick jazorin wrote: Hi. You need to add to the web.xml file the following lines: CLIENT-CERT Whe

Re: JDBCRealm CLIENT-CERT Authentication

2003-03-17 Thread jazorin
Hi. You need to add to the web.xml file the following lines: CLIENT-CERT When you try to connect to the protected resource, the navigator will request a client certificate. Regards. -- Hi, i tried the following: + Add the mehtod authenticate(...) to the File JDB

Re: JDBCRealm CLIENT-CERT Authentication

2003-03-14 Thread Patrick Flohr
Hi, i tried the following: + Add the mehtod authenticate(...) to the File JDBCRealm.java + build a Tomcat distribution + replace the catalina.jar with the new version (on an other machine) + add full DN to the web.xml + insert into table users ('DN','DN') + insert into table user_roles ('DN','DN')

Re: JDBCRealm CLIENT-CERT Authentication

2003-03-13 Thread jazorin
Hi. You can to implement a JDBCRealm with client certificates modifying the org.apache.catalina.realm.JDBCRealm class. You need add the public Principal authenticate(X509Certificate[] cert) method. Inside, you have to include the following lines: import java.security.cert.X509Certifica

JDBCRealm CLIENT-CERT Authentication

2003-03-13 Thread Patrick Flohr
Hello, is it correct that only Memory- and JNDIRealm can perform the mapping between the DN included in a certificate and a users role? Because of the lack of dynamic changes in MemoryRealm, i want to replace it with a JDBCRealm. Is there any information available how to implement a JDBCRealm th

Realm Implementations and CLIENT-CERT Authentication

2003-03-07 Thread Patrick Flohr
Hello, is it correct that only Memory- and JNDIRealm can perform the mapping between the DN included in a certificate and a users role? Because of the lack of dynamic changes in MemoryRealm, i want to replace it with a JDBCRealm. Is there any information available how to implement a JDBCRealm

Re: Client-cert authentication.

2002-11-13 Thread jean-frederic clere
Moisés Serrano Martínez wrote: - Original Message - From: "jean-frederic clere" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Wednesday, November 13, 2002 4:58 PM Subject: Re: Client-cert authentication. Moisés Serrano Ma

Re: Client-cert authentication.

2002-11-13 Thread Moisés Serrano Martínez
- Original Message - From: "jean-frederic clere" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Wednesday, November 13, 2002 4:58 PM Subject: Re: Client-cert authentication. Moisés Serrano Martínez wrote: > Thanks a lot.

Re: Client-cert authentication.

2002-11-13 Thread jean-frederic clere
Moisés Serrano Martínez wrote: Thanks a lot. At the end I got it. Great! A new question: Does anybody know how to access to the data in a certificate from a client browser. In order to sign a document in a client who doesn´t have the Java environment. I am not sure I understand what you wa

Re: Client-cert authentication.

2002-11-13 Thread Moisés Serrano Martínez
Thanks a lot. At the end I got it. A new question: Does anybody know how to access to the data in a certificate from a client browser. In order to sign a document in a client who doesn´t have the Java environment. any idea for beginning to investigate. javasript? browser api? -- To unsubscrib

Re: Client-cert authentication.

2002-11-08 Thread Moisés Serrano Martínez
thanks a lot. I´ll try it this weekend - Original Message - From: "jean-frederic clere" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Friday, November 08, 2002 5:59 PM Subject: Re: Client-cert authentication. Moisés Serran

Re: Client-cert authentication.

2002-11-08 Thread jean-frederic clere
Moisés Serrano Martínez wrote: I´ve done it and the problem continues: I´ve included the self-signed and intermedia certificates in cacerts ( perhaps it´s a problem with the java environment? what files is necesary to configure in order to obtain client-cert authentication? The only thing I am

Re: Client-cert authentication.

2002-11-08 Thread Moisés Serrano Martínez
I´ve done it and the problem continues: I´ve included the self-signed and intermedia certificates in cacerts ( perhaps it´s a problem with the java environment? what files is necesary to configure in order to obtain client-cert authentication? Thanks a lot for the interest. - Original

Re: Client-cert authentication.

2002-11-06 Thread Bob Herrmann
ol="TLS" algorithm="SunX509" > keystoreType="JKS"/> > > Is necesary to configure both keystores? > Thanks again, and sorry for my question if it´s something clear for > everyone. > > - Original Message - > From: "Bob Herrman

Re: Client-cert authentication.

2002-11-06 Thread jean-frederic clere
n" <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Tuesday, November 05, 2002 9:58 PM Subject: Re: Client-cert authentication. As someone else already pointed out, you need to configure the trust stores (Which tell tomcat what clients to trust.

Re: Client-cert authentication.

2002-11-06 Thread Moisés Serrano Martínez
t; <[EMAIL PROTECTED]> To: "Tomcat Developers List" <[EMAIL PROTECTED]> Sent: Tuesday, November 05, 2002 9:58 PM Subject: Re: Client-cert authentication. > > As someone else already pointed out, you need to configure the trust > stores (Which tell tomcat what clients to t

Re: Client-cert authentication.

2002-11-05 Thread Bob Herrmann
As someone else already pointed out, you need to configure the trust stores (Which tell tomcat what clients to trust.) You can do that by changing some config files, or like this on the command line (with redhat) export CATALINA_OPTS="-Djavax.net.ssl.trustStore=/home/bob/cacerts.jks -Djavax.net.s

Client-cert authentication.

2002-11-05 Thread Moisés Serrano Martínez
I´ve a small (or big) problem configuring Tomcat 4.1.12. Does anyone know how to configure the client side of the matter? What I have done is : 1) Create a selfsigned certificate (master certificate). 2) With the master create another one intemediate for localhost (signed with the private key o

JNDIRealm, Bug 4352 and CLIENT-CERT authentication

2002-03-25 Thread Richard Priestley
Hi, Apologies in advance for my errors - I'm a newbie to contributing code rather than just downloading it. As I understand things, I cannot use a JNDI realm with CLIENT-CERT authentication at the moment (very similiar to BUG 4352, which describes a similar problem for JDBCRealm).