You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Ar...@fr.thalesgroup.com on 2001/06/12 10:08:28 UTC

SSL client Authentication problem.

hello all,

I am testing Tomcat standalone with client authentication on, and getting
some odd results.  It works fine if client authentication is not turned on
(for both IE and Netscape browsers).  If I turn on client authentication,
Netscape claims that I do not have a personal certificate, and IE asks me to
choose from an empty list of certificates. 
Any ideas on the problem with the certificate request when I use Tomcat
standalone?  Is there some configuration to indicate the type of certificate
the server is requesting?  I am using both client & server certificates
generated by Openssl.
More precisely I have an Server Certificate stored in Keystore (Tomcat side)
and a client
Certificate integrated in my browser. Both certificates are signed by a CA
Authority whose
certificate is on my browser too. 
This problem has been already encoutered by many people
(bnelson@extricity.com for example) 
Many thanks,
Arnaud Pierre.

PS: I use tomcat 4.0b5