tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jason Pyeron" <jpye...@pdinc.us>
Subject RE: clent authentication using a smard card
Date Mon, 19 Oct 2009 18:20:49 GMT

> -----Original Message-----
> From: Marcello Marangio 
<snip/>
> 
> It seems that firefox behaves: if the smartcard is in firefox 
> asks the PIN of the smartcard. 
> I am pretty sure it can read my smartcard, because I can use 
> mod_ssl with Apache 2.2 

Apache 2.x can be forgiving about the chain, and may be presenting different
information.

> and I can read the certificate's 
> information with a perl routine.
> 
> Furthermore, from the debug logs it is clear that there is an 
> ssl handshaking going on.

Can you verify that the browser knows the servers chain? And can you verify that
the server is providing an acceptible chain for the cert that firefox knows
about?

> Any clue?
> Thanks
> M
> 
> 

Do you have access to IE on windows for this? If you do, it will be much
quicker, and easier.

I am just trying to get a baseline established, so I can plow throught with my
ten steps.

-Jason

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                      PD Inc. http://www.pdinc.us -
- Principal Consultant              10 West 24th Street #100    -
- +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message