RE: Client cert authentication

2010-04-26 Thread Jason Pyeron
> -Original Message- > From: acastanheira2001 > Sent: Monday, April 26, 2010 8:35 > Subject: Re: Client cert authentication > > > Thanks again Mark, > > I think it will be difficult to move to Tomcat 6 soon. If I > change mod_proxy to mod_jk, does mod_j

Re: Client cert authentication

2010-04-26 Thread acastanheira2001
Thanks again Mark, I think it will be difficult to move to Tomcat 6 soon. If I change mod_proxy to mod_jk, does mod_jk passes the client cert to Tomcat 5.5? Thank you, Andre Mark Thomas wrote: > > On 22/04/2010 20:00, acastanheira2001 wrote: >> >> Thanks Mark, >> >> I use mod_proxy (Proxy

Re: Client cert authentication

2010-04-22 Thread Mark Thomas
On 22/04/2010 20:00, acastanheira2001 wrote: > > Thanks Mark, > > I use mod_proxy (ProxyPass and ProxyReverse) to connect Apache (2.2.3) to > Tomcat(5.5)/Jboss (4.2). Can mod_proxy pass client cert to Tomcat? With 5.5.x, not with out some custom code. With 6.0.x, yes. You'd need to port this to

Re: Client cert authentication

2010-04-22 Thread acastanheira2001
Thanks Mark, I use mod_proxy (ProxyPass and ProxyReverse) to connect Apache (2.2.3) to Tomcat(5.5)/Jboss (4.2). Can mod_proxy pass client cert to Tomcat? I use the following code to get the client cert, but certs object is null: public void verificaCertCliente(HttpServletRequest req) throws Ser

Re: Client cert authentication

2010-04-19 Thread Mark Thomas
On 19/04/2010 13:05, acastanheira2001 wrote: > > Hi, > > I have an apache server in front of Tomcat/Jboss, the former receives the > client cert and does revocation list and trust validation. > > I need to pass the client cert to Tomcat only to check the SubjectAltNames. > > As far as trust acc