Client Authenification problem in Tomcat

[Martin Cavanagh <ca...@con-sense-group.com>]

So I have now setup my Tomcat 5.5 with HTTPS via APR 
(tcnative-1.dll)/OpenSSL.

It works great.

Now I want to require SSL authenification.

Thats easy enough to do, I just enable SSLVerifyClient.

<Connector port="443" maxHttpHeaderSize="8192"
           maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
           enableLookups="false" disableUploadTimeout="true"
           acceptCount="100" scheme="https" secure="true"
           SSLEngine="on"
           SSLVerifyClient="require"
           SSLCertificateFile="${catalina.base}/conf/192.168.168.79.crt"
           
SSLCertificateKeyFile="${catalina.base}/conf/192.168.168.79.key" />


Now of course my Browser is broken.

I've downloaded a personal email certificate from Thawte and installed 
in Firefox.......but I don't get, how do I install the certificate into 
OpenSSL.  Can anyone help here?  Or is this only possible via the
Java Keystore?

Also how do get the certificates out of Firefox / internet explorer?

Thanks alot

Martin

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org