On Mar 31, 2009, at 14:44 , Christopher Schultz wrote:
On 3/31/2009 9:28 AM, André Cruz wrote:
I'm coding a servlet that does SSL client cert authentication. The
requests already arrive on a SSL connector but for this servlet in
particular the SSL connection needs to be renegotiated to ask for a
client certificate. Is there anyway to do this inside a servlet?
With or
without APR?
I think you just want to set the clientAuth attribute on your
connector:
<Connector ... clientAuth="want" />
The problem with "want" is that, at least with IE, the browser always
prompts the user for a certificate.
I just want the prompt to appear when a specific servlet is requested.
I can do this with Apache and <Location> directives but I would like
to use a tomcat-only configuration.
Best regards,
André Cruz
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org