You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Arunkumar Janarthanan <ar...@gmail.com> on 2010/03/05 15:14:04 UTC
[users@httpd] Re: SSL mutual authentication client certificate creation using
Keytool
Could anyone please advice with this ?
On Thu, Mar 4, 2010 at 8:43 AM, Arunkumar Janarthanan <
arunkumar.webadmin@gmail.com> wrote:
> Hi All,
>
> I have an application connecting to the secure Apache URL, I have generated
> OpenSSL certificates and used it as CA and servercert, also generated client
> certificate using hte below documentation.
>
> http://www.impetus.us/~rjmooney/projects/misc/clientcertauth.html<http://www.impetus.us/%7Erjmooney/projects/misc/clientcertauth.html>
>
> However my client application ( another Java application) will connect to
> this Apache instance needs a client certificate for authentication. Now that
> I can use Keytool and import the Apache's client certificate and create a
> Keystore.
>
> However how to proceed further, how my Apache will understand the client's
> certificates and allow the client app to connect and process the requests ?
>
> Please advice.
>
> Arun J
>
Re: [users@httpd] Re: SSL mutual authentication client certificate
creation using Keytool
Posted by Arunkumar Janarthanan <ar...@gmail.com>.
Thanks Eric, my client for the Apache is another Java application. So I used
keytool and generated trustore importing OpenSSL generated CA certificate.
Now that I have used export option to generate a certificate from Keytool,
How could I use this ceritificate now on Apache to authenticate the requests
from my client application ?
http://java.sun.com/j2se/1.3/docs/tooldocs/win32/keytool.html
Please advice.
On Fri, Mar 5, 2010 at 9:23 AM, Eric Covener <co...@gmail.com> wrote:
> On Fri, Mar 5, 2010 at 9:14 AM, Arunkumar Janarthanan
> <ar...@gmail.com> wrote:
> > Could anyone please advice with this ?
>
> Configure Apache to request a certificate from the client:
>
> http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslverifyclient
>
> Configure Apache to trust the issuer of your clients certificate:
>
> http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcacertificatefile
>
> --
> Eric Covener
> covener@gmail.com
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
Re: [users@httpd] Re: SSL mutual authentication client certificate
creation using Keytool
Posted by Eric Covener <co...@gmail.com>.
On Fri, Mar 5, 2010 at 9:14 AM, Arunkumar Janarthanan
<ar...@gmail.com> wrote:
> Could anyone please advice with this ?
Configure Apache to request a certificate from the client:
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslverifyclient
Configure Apache to trust the issuer of your clients certificate:
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcacertificatefile
--
Eric Covener
covener@gmail.com
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org