Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of egolatra@gmail.com designates
 209.85.198.184 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:to:subject:mime-version:content-type;
        b=AvUyyyTCbnQoNiBsj4lYUk+Syt7RzhQMX+1ANJUi5ndhIsYrJYVB2icUc9RyEWdbXn7LRRZHKL8v7ZwKEPZbMsi0aF6dEhATM8Pr2JvbXOo6abCEubOiZUxKVjUCInQrkPNqSX5eXOptK5+iKpEetW/QrKbz+zNjhSIsR/bS6LI=
Message-ID: <f218f4d20710251125p496a1579n7b07d428a91f3c46@mail.gmail.com>
Date: Thu, 25 Oct 2007 20:25:50 +0200
From: David <egolatra@gmail.com>
To: users@tomcat.apache.org
Subject: Validation of certificates through OCSP
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_910_3329155.1193336750382"

------=_Part_910_3329155.1193336750382
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hello,

There was some traffic regarding OCSP and the possibility to implement it
(there's even a thread dealing with JDK-native support ) Is anything done in
this respect?

Otherwise , I don't know what are the options I can follow. I found the
package "jGuard" which apparently provices OCSP validation ... any feedback
about this? I also found a servlet filter in the list which provides for
this functionality but I wonder if it's the best way to go about it. The
author of the filter states that he couldn't make it work as a real but
since jGuard probably works at the Realm level I think he could be wrong
assuming it is impossible to do that.

Anyone has dealt with this before? Any hints?

Thanks a lot,

Juan Sierra

------=_Part_910_3329155.1193336750382--