Hello, I'm trying to configure client authentication in Tomcat 7 on Windows 7. I have the following connector in the server.xml:
<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" keystoreFile="d:\certs\server_cert.jks" keystorePass="changeit" truststoreFile="d:\certs\truststore.jks" truststorePass="changeit" clientAuth="true" sslProtocol="TLS" /> In my web.xml I have the following : <login-config> <auth-method>CLIENT-CERT</auth-method> <realm-name>PKI Enabled App</realm-name> </login-config> This forces client authentication when I try to access the app using a browser and when I provide a trusted certificate, I'm able get authenticated. After the authentication I was expecting to get the client certificate information in the session, but I get nothing. How do I pass the Common Name from the subject line of the client certificate to the server during authentication so that I can access it from a struts action? Thanks in advance.