Re: how to log unauthorized https access attempts (secure=true clientAuth=true)

2013-08-23 Thread Mark Thomas
On 23/08/2013 12:28, Ja kub wrote: > Thx for response, > > Will it be developed in next releases of tomcat 7? There are currently no plans to do so. > Or it won't because > there is no such need, and such issues should be handled some other way? It is simply a case that, to date, no one has wan

Re: how to log unauthorized https access attempts (secure=true clientAuth=true)

2013-08-23 Thread Ja kub
Thx for response, Will it be developed in next releases of tomcat 7? Or it won't because there is no such need, and such issues should be handled some other way? If some other way is recommended, than how should such functionality be handled? Regards Jakub On Fri, Aug 23, 2013 at 1:09 PM, Mark

Re: how to log unauthorized https access attempts (secure=true clientAuth=true)

2013-08-23 Thread Mark Thomas
On 23/08/2013 11:02, Ja kub wrote: > Hallo > > I use https with client cert authentication > > scheme="https" secure="true" clientAuth="true" sslProtocol="TLS" > keystoreFile="...jks" key..Pass="..." keystoreType="JKS" > truststoreFile="...jks" trust..Pass=".." > /> > > AccessLogVa

how to log unauthorized https access attempts (secure=true clientAuth=true)

2013-08-23 Thread Ja kub
Hallo I use https with client cert authentication AccessLogValve cannot be placed inservice, only in engine (host, context), but if client has bad/untrusted cert or no cert at all, possibly connector doesn't pass him to engine and to AccessLogValve. How can I log such access attempts with tomc