tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Bill Barker" <wbar...@wilshire.com>
Subject Re: Can not get SSL Client Certificate
Date Thu, 04 Sep 2003 04:07:58 GMT
Try:
   X509Certificate [] certs =
          (X509Certificate
[])request.getAttribute("javax.servlet.request.X509Certificate");

"Elif Akten" <aktenel@hotmail.com> wrote in message
news:Law9-F73gXVWz1jUwOm0000a32d@hotmail.com...
> Hi,
> I have been trying to get SSL client certificate during a client
> authenticated SSL session. I am using Apache 2.0 with Tomcat 4.1.27.
> Everything works succesfully: when I want to open a SSL protected JSP page
> my browser asks for my client certificate and verifies it. But when I try
to
> get client certificate using request.getHeader("SSL_CLIENT_CERT") it
returns
> null. Also request.getAuthType() and request.getUserPrincipal() return
null
> value. Following is the relevant part from our httpd.conf file:
>
> <VirtualHost dune.net:443>
> SSLEngine On
> SSLCipherSuite
ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
> SSLCertificateFile conf/ssl/server.crt
> SSLCertificateKeyFile conf/ssl/server.key
>
> JkExtractSSL On
> JkHTTPSIndicator HTTPS
> JkSESSIONIndicator SSL_SESSION_ID
> JkCIPHERIndicator SSL_CIPHER
> JkCERTSIndicator SSL_CLIENT_CERT
> </VirtualHost>
>
> SSLVerifyClient require
> SSLVerifyDepth 2
> SSLCACertificateFile "C:/Program Files/Apache
Group/Apache2/conf/ssl/ca.cer"
> SSLCACertificatePath "C:/Program Files/Apache Group/Apache2/conf/ssl"
> SSLCACertificateFile "C:/Program Files/Apache
> Group/Apache2/conf/ssl/rootca.cer"
>
> <IfModule !mod_jk.c>
> LoadModule jk_module "C:/Program Files/Apache
> Group/Apache2/modules/mod_jk.dll"
> </IfModule>
>
> JkWorkersFile "C:/Program Files/Apache Tomcat 4.0/conf/workers.properties"
> JkLogFile "C:/Program Files/Apache Tomcat 4.0/logs/mod_jk.log"
> JkLogLevel info
> JkMount /examples/* ajp13
>
> Also our ssl.conf file includes the following lines :
>
> SSLOptions +StdEnvVars +ExportCertData
> JkOptions +ForwardKeySize +ForwardURICompat +ForwardDirectories
> JkMount /demo/* ajp13
> JkExtractSSL On
> JkEnvVar SSL_CLIENT_CERT "<UNSET>"
>
> What should I do to read the client certificate? Any help is welcome...
>
> _________________________________________________________________
> The new MSN 8: advanced junk mail protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail




Mime
View raw message