Return-Path: 
 <tomcat-user-return-36440-qmlist-jakarta-archive-tomcat-user=jakarta.apache.org@jakarta.apache.org>
Delivered-To: apmail-jakarta-tomcat-user-archive@apache.org
Received: (qmail 32447 invoked from network); 7 Oct 2002 09:20:24 -0000
Received: from unknown (HELO nagoya.betaversion.org) (192.18.49.131)
  by daedalus.apache.org with SMTP; 7 Oct 2002 09:20:24 -0000
Received: (qmail 23291 invoked by uid 97); 7 Oct 2002 09:20:59 -0000
Delivered-To: qmlist-jakarta-archive-tomcat-user@jakarta.apache.org
Received: (qmail 23275 invoked by uid 97); 7 Oct 2002 09:20:58 -0000
Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
List-Unsubscribe: <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
List-Subscribe: <mailto:tomcat-user-subscribe@jakarta.apache.org>
List-Help: <mailto:tomcat-user-help@jakarta.apache.org>
List-Post: <mailto:tomcat-user@jakarta.apache.org>
List-Id: "Tomcat Users List" <tomcat-user.jakarta.apache.org>
Reply-To: "Tomcat Users List" <tomcat-user@jakarta.apache.org>
Delivered-To: mailing list tomcat-user@jakarta.apache.org
Received: (qmail 23263 invoked by uid 98); 7 Oct 2002 09:20:57 -0000
X-Antivirus: nagoya (v4218 created Aug 14 2002)
Message-ID: <3DA15250.918C2213@gmd-net.de>
Date: Mon, 07 Oct 2002 11:22:24 +0200
From: Wolfgang Stein <zorro@gmd-net.de>
X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U)
X-Accept-Language: en
MIME-Version: 1.0
To: tomcat-user@jakarta.apache.org
Subject: Re: SSL clientAuth="optional" ?!?!?
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N
X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N

Hi,
 
don't have the spec at hand, but have you already
tried something like:

...
<error-page>
    <error-code>401</error-code>
    <location>/IfNoClientCertThenRegister</location>
</error-page>
...
<security-constraint>
    ...
    <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
    ...
</security-constraint>
...


in your web.wml ?

You might also use a filter or front controler
as an alternative.

Cheers,
Wolfgang

> -----Original Message-----
> From: check-mate@gmx.net [mailto:check-mate@gmx.net]
> Sent: Monday, October 07, 2002 10:32 AM
> To: tomcat-user@jakarta.apache.org
> Subject: SSL clientAuth="optional" ?!?!?
> 
> 
> hi!
> 
> first of all: i'm using tomcat 4.0.4
> 
> i need a client authentication based on a certificate. if the 
> user is new he
> should be able to register and receive his personal key.
> 
> when the clientAuth is set to true the user has no chance to 
> be redirected
> to a register page ....
> 
> maybe there is a path out there?
> is it possible with other versions of tomcat: 4.1.x?
> 
> PLEASE help me!
> blip

--
To unsubscribe, e-mail:   <mailto:tomcat-user-unsubscribe@jakarta.apache.org>
For additional commands, e-mail: <mailto:tomcat-user-help@jakarta.apache.org>