Mailing-List: contact httpclient-users-help@hc.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "HttpClient User Discussion" <httpclient-users@hc.apache.org>
Received-SPF: neutral (athena.apache.org: local policy)
Subject: Re: httpclient 4, ssl and client side certificates
From: Oleg Kalnichevski <olegk@apache.org>
To: HttpClient User Discussion <httpclient-users@hc.apache.org>
In-Reply-To: <4BE38EE0.7000003@mnetgroup.com>
References: <4BE38EE0.7000003@mnetgroup.com>
Content-Type: text/plain; charset="UTF-8"
Date: Fri, 07 May 2010 13:17:31 +0200
Message-ID: <1273231051.1638.8.camel@ubuntu>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit

On Fri, 2010-05-07 at 13:24 +0930, Luke Coe wrote:
> Hi All,
> 
> I am having trouble working out how I can get get HttpClient 4 to use 
> SSL in the way I need.
> 
> I have X HTTPS servers that I send requests to. One requires a client 
> side certificate while the others have trusted certificates and 
> therefore require no client side certificate. I have no issue connecting 
> to the server requiring the client side certificate (its in my 
> keystore), however every time I try to connect to the servers with 
> trusted certificates, my client side certificate is offered by 
> HttpClient and therefore fails authentication.
> 
> My question is this: is there a way for HttpClient to offer the client 
> side certificate only to the server requiring it and not to the others?
> 
> Thanks in advance,
> Luke


Luke

This is entirely out of HttpClient control. All aspects of SSL
authentication can be controlled through the JSSE API.

Besides, I always thought that SSL clients would present a certificate
ONLY if challenged by the server.

Oleg


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org