Hello,

I'm trying to configure client authentication in Tomcat 7 on Windows 7.  I have 
the following connector in the server.xml:

<Connector port="443"
           protocol="HTTP/1.1"
           SSLEnabled="true"
           maxThreads="150"
           scheme="https"
           secure="true"
           keystoreFile="d:\certs\server_cert.jks"
           keystorePass="changeit"
           truststoreFile="d:\certs\truststore.jks"
           truststorePass="changeit"
           clientAuth="true"
           sslProtocol="TLS" />

In my web.xml I have the following :

    <login-config>
        <auth-method>CLIENT-CERT</auth-method>
        <realm-name>PKI Enabled App</realm-name>
    </login-config>

This forces client authentication when I try to access the app using a browser 
and when I provide a trusted certificate, I'm able get authenticated.  After 
the authentication I was expecting to get the client certificate information in 
the session, but I get nothing.  How do I pass the Common Name from the subject 
line of the client certificate to the server during authentication so that I 
can access it from a struts action?

Thanks in advance.

Reply via email to