You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2003/08/12 13:52:53 UTC
DO NOT REPLY [Bug 19867] -
Declarative SSL Client Authentication don't work
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19867>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND
INSERTED IN THE BUG DATABASE.
http://nagoya.apache.org/bugzilla/show_bug.cgi?id=19867
Declarative SSL Client Authentication don't work
medthomas@ntlworld.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |INVALID
------- Additional Comments From medthomas@ntlworld.com 2003-08-12 11:52 -------
CLIENT-CERT only works over SSL. You need to add the following after </auth-
constraint> and before </security-constraint>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
I believe the servlet spec could be clearer about this. Currently it is
perfectly valid to specify CLIENT-CERT without specifying a transport-
guarantee. I have followed this up with the servlet spec team. If the spec
changes, this will be incorporated into Tomcat. Currently, Tomcat's behaviour
is valid.
[5.0] Tomcat procrun future ?
Posted by Remy Maucherat <re...@apache.org>.
Ending with something like that would be cool:
http://www.micromata.com/M_tec/schroedinger/index.html
Of course, I don't expect we'll be able to put them out of buisness for
the forseeable future :-D
- Implementing deploy shortcuts with calls to Ant would be relatively easy
- Parsing the log output isn't easy at all (they seem to be using log4j,
probably with a custom appender); basically, this can't be done easily,
since we have to know the logging used, or the messages won't get
processed properly
- Showing request dumps is cool, but not *that* useful IMO
Remy
---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-dev-help@jakarta.apache.org
[5.0] Tomcat procrun future ?
Posted by Remy Maucherat <re...@apache.org>.
Ending with something like that would be cool:
http://www.micromata.com/M_tec/schroedinger/index.html
Of course, I don't expect we'll be able to put them out of buisness for
the forseeable future :-D
- Implementing deploy shortcuts with calls to Ant would be relatively easy
- Parsing the log output isn't easy at all (they seem to be using log4j,
probably with a custom appender); basically, this can't be done easily,
since we have to know the logging used, or the messages won't get
processed properly
- Showing request dumps is cool, but not *that* useful IMO
Remy