Re: JKS certificate for Tomcat client authentication

2018-03-17 Thread Igor Cicimov
Hi Chris, On Tue, Feb 27, 2018 at 1:56 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Igor, > > On 2/23/18 5:47 PM, Igor Cicimov wrote: > > On Sat, Feb 24, 2018 at 7:52 AM, Christopher Schultz < > > ch...@christopherschultz.n

Re: JKS certificate for Tomcat client authentication

2018-02-26 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Igor, On 2/23/18 5:47 PM, Igor Cicimov wrote: > On Sat, Feb 24, 2018 at 7:52 AM, Christopher Schultz < > ch...@christopherschultz.net> wrote: > >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 >> >> Igor, >> >> On 2/23/18 4:45 AM, Igor Cicimov

Re: JKS certificate for Tomcat client authentication

2018-02-23 Thread Igor Cicimov
Hi Chris, On Sat, Feb 24, 2018 at 7:52 AM, Christopher Schultz < ch...@christopherschultz.net> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Igor, > > On 2/23/18 4:45 AM, Igor Cicimov wrote: > > Hi all, > > > > I have the following setup in the tomcat default file on > > Ubunntu-

Re: JKS certificate for Tomcat client authentication

2018-02-23 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Igor, On 2/23/18 4:45 AM, Igor Cicimov wrote: > Hi all, > > I have the following setup in the tomcat default file on > Ubunntu-14.04: > > JAVA_OPTS="$JAVA_OPTS > -Djavax.net.ssl.keyStore=/opt/encompass/keystore/keystore.jks" > JAVA_OPTS="$JAVA_O

JKS certificate for Tomcat client authentication

2018-02-23 Thread Igor Cicimov
Hi all, I have the following setup in the tomcat default file on Ubunntu-14.04: JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.keyStore=/opt/encompass/keystore/keystore.jks" JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.trustStore=/opt/encompass/keystore/truststore.jks" The keystore.jks holds dozen of SSL keys o

RE: Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
I solved my problem, I changed my web.xml to the following: PartNos /TNR/* GET POST admin secureconn CONFIDENTIAL converter-api

Re: Tomcat Client Authentication

2013-02-20 Thread Cédric Couralet
2013/2/20 : > Hello Cedric, > >>And look at the first line which could be Owner or Subject (I only have a >>french version at the moment which says Propriétaire:) > > (I created another Client-Cert) > I did it and it shows me: CN=User03, OU=Any, O=Company, L=City, ST=Something, > C=DE > > So I w

AW: Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
Hello Cedric, >And look at the first line which could be Owner or Subject (I only have a >french version at the moment which says Propriétaire:) (I created another Client-Cert) I did it and it shows me: CN=User03, OU=Any, O=Company, L=City, ST=Something, C=DE So I wrote: But still I get a 4

Re: Tomcat Client Authentication

2013-02-20 Thread Cédric Couralet
2013/2/20 : > Hello Mark, > > thank you for the quick answer! Could you explain, how I can change how to > derive the user name from the cert? I don't have a DN in my certificate (Only > E, CN, OU, O, L, S, C). This would be very great. > Hello, The different E, CN,... are elements which compos

AW: Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
Hello Mark, thank you for the quick answer! Could you explain, how I can change how to derive the user name from the cert? I don't have a DN in my certificate (Only E, CN, OU, O, L, S, C). This would be very great. Mit freundlichen Grüßen, Maximilian Schmidt -

Re: Tomcat Client Authentication

2013-02-20 Thread Mark Thomas
On 20/02/2013 12:01, maximilian-schm...@telekom.de wrote: And this is my tomcat-users.xml ("Maximilian Schmidt" is the CN of my client-certificate): By default, you have to use the DN not the CN. See X509UsernameRetrieverClassName in http://tomcat.apache.org/tom

Tomcat Client Authentication

2013-02-20 Thread Maximilian-Schmidt
Hello dear Tomcat Users and Developers, I'm want my tomcat to use Client Authentication to check access of different users. I created all certs (HTTPS works) but if I connect with a Client and send my Client Cert I always get a 403 Error. I don't think it'S a problem of certificates but of the