On Mar 31, 2009, at 14:44 , Christopher Schultz wrote:
On 3/31/2009 9:28 AM, André Cruz wrote:
I'm coding a servlet that does SSL client cert authentication. The
requests already arrive on a SSL connector but for this servlet in
particular the SSL connection needs to be renegotiated to ask for a
client certificate. Is there anyway to do this inside a servlet? With or
without APR?

I think you just want to set the clientAuth attribute on your connector:

<Connector ... clientAuth="want" />

The problem with "want" is that, at least with IE, the browser always prompts the user for a certificate.

I just want the prompt to appear when a specific servlet is requested. I can do this with Apache and <Location> directives but I would like to use a tomcat-only configuration.

Best regards,
André Cruz


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to