Return-Path: 
 <users-return-203285-apmail-tomcat-users-archive=tomcat.apache.org@tomcat.apache.org>
Delivered-To: apmail-tomcat-users-archive@www.apache.org
Received: (qmail 79537 invoked from network); 20 Oct 2009 10:25:55 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 20 Oct 2009 10:25:55 -0000
Received: (qmail 22362 invoked by uid 500); 20 Oct 2009 10:25:51 -0000
Delivered-To: apmail-tomcat-users-archive@tomcat.apache.org
Received: (qmail 22328 invoked by uid 500); 20 Oct 2009 10:25:51 -0000
Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@tomcat.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@tomcat.apache.org>
List-Post: <mailto:users@tomcat.apache.org>
List-Id: <users.tomcat.apache.org>
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Delivered-To: mailing list users@tomcat.apache.org
Received: (qmail 22317 invoked by uid 99); 20 Oct 2009 10:25:51 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 20 Oct 2009 10:25:51 +0000
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: local policy)
Received: from [138.66.30.5] (HELO sirio3.tno.it) (138.66.30.5)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 20 Oct 2009 10:25:41 +0000
Received: from localhost (localhost.localdomain [127.0.0.1])
	by sirio3.tno.it (Postfix) with ESMTP id 95B729D8578
	for <users@tomcat.apache.org>; Tue, 20 Oct 2009 12:25:21 +0200 (CEST)
X-Virus-Scanned: amavisd-new at tno.it
Received: from sirio3.tno.it ([127.0.0.1])
	by localhost (sirio3.tno.it [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id j3fHfqCAQlLK for <users@tomcat.apache.org>;
	Tue, 20 Oct 2009 12:25:17 +0200 (CEST)
Received: from marangio (unknown [10.66.82.51])
	(Authenticated sender: m.marangio@innova.puglia.it)
	by sirio3.tno.it (Postfix) with ESMTPSA id 81E829D81A7
	for <users@tomcat.apache.org>; Tue, 20 Oct 2009 12:25:17 +0200 (CEST)
From: "Marcello Marangio" <m.marangio@innova.puglia.it>
To: "'Tomcat Users List'" <users@tomcat.apache.org>
References: <AE1BA4922554412DA80D3B6B6A2C229D@csata.tno.it>
 <0A38EF81B91C4A7AB0EBD793D18127EA@phoenix>
 <613C2688FC4F4B04A015EF5F8285B8CF@csata.tno.it>
 <E221A5D305F04C249B3F5779B3B708FD@phoenix>
 <C0C8C793C9BC4C5597252E87071047AD@csata.tno.it>
 <645E6AAFE6134734BC551138930B02DB@phoenix>
Subject: R: clent authentication using a smard card
Date: Tue, 20 Oct 2009 12:25:09 +0200
Message-ID: <CCAB0B74722D468AAC4F8C675981D051@csata.tno.it>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 11
Thread-Index: 
 AcpQt9Z+bJ260/7RS/KTBcySw6dZmAAAKe+gAATyXkAABvNIAAAevQAgAAKqy3AAADf4sA==
In-Reply-To: <645E6AAFE6134734BC551138930B02DB@phoenix>
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
X-Virus-Checked: Checked by ClamAV on apache.org



> -----Messaggio originale-----
> Da: Jason Pyeron [mailto:jpyeron@pdinc.us]
> Inviato: marted=EC 20 ottobre 2009 12.13
> A: 'Tomcat Users List'
> Oggetto: RE: clent authentication using a smard card
>=20
>=20
>=20
>=20
> > -----Original Message-----
> > From: Marcello Marangio [mailto:m.marangio@innova.puglia.it]
> > Sent: Tuesday, October 20, 2009 5:10
> > To: 'Tomcat Users List'
> > Subject: R: clent authentication using a smard card
> >
> >
> >
> > > -----Messaggio originale-----
> > > Da: Jason Pyeron [mailto:jpyeron@pdinc.us]
> > > Inviato: luned=EC 19 ottobre 2009 20.21
> > > A: 'Tomcat Users List'
> > > Oggetto: RE: clent authentication using a smard card
> > >
> > <cut>
> > > >
> > > >
> > >
> > > Do you have access to IE on windows for this? If you do, it will =
be
> > > much quicker, and easier.
> > >
> > > I am just trying to get a baseline established, so I can
> > plow throught
> > > with my ten steps.
> > >
> >
> > Ok.
> > I made the same thing with IE and in the debug it says "null
> > cert chain"
> > during the client authentication handshake.
> > Now I am confused...
> >
>=20
> Lets step back and look.
>=20
> Can you provide the smart card and server certificate chain (no keys
> please)?

Hang on a second...
The server certificate is an self signed certificate I made with =
keytool.
The smart card certificate, instead, is a real one, I use to legally =
sign
electronic documents; the issuer is an Italian CA.

Do you expect the issuer of the smart card certificate to be the same as =
the
server one?

How can I print out the certificate chain?
Thanks again
M

>=20
> > M
> >
> >
> > =
---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> > For additional commands, e-mail: users-help@tomcat.apache.org
> >
> >
>=20
>=20
>=20
> --
> =
-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=
=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-
> -                                                               -
> - Jason Pyeron                      PD Inc. http://www.pdinc.us -
> - Principal Consultant              10 West 24th Street #100    -
> - +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
> -                                                               -
> =
-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=
=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-
> This message is copyright PD Inc, subject to license 20080407P00.
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands, e-mail: users-help@tomcat.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org