You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by Dan Tran <da...@hotmail.com> on 2003/10/23 16:14:11 UTC

Client Certificate Authentication Question

Hello, I need to use httpclient rc2 to communiate with a untrusted server (self sign).  The server also requires the client to send a client certificate.

Handling untrusted connection over https is straight forward
according to the example in EasySSLProtocolSocketFactory. 

The question here is how to I configure EasySSLProtocolSocketFactory to handle client certificate?
Given the fact that I do have client certificate at the httpclient side.

Please advice and many thanks

-Dan

Re: Client Certificate Authentication Question

Posted by Ortwin Glück <or...@nose.ch>.
It just means you need to write your own Socket factory that returns a 
socked configured with the client certificate! Of yourse you can use 
HttpClient.

Odi

Dan Tran wrote:
> Odi, thanks for the suggestion.  Does it mean, I will not be able to use
> HttpClient at all?
> 
> Many thanks
> 
> -Dan


---------------------------------------------------------------------
To unsubscribe, e-mail: commons-httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-httpclient-dev-help@jakarta.apache.org

Re: Client Certificate Authentication Question

Posted by Dan Tran <da...@hotmail.com>.
Odi, thanks for the suggestion.  Does it mean, I will not be able to use
HttpClient at all?

Many thanks

-Dan


----- Original Message ----- 
From: "Ortwin Glück" <or...@nose.ch>
To: "Commons HttpClient Project" <co...@jakarta.apache.org>
Sent: Friday, October 24, 2003 12:33 AM
Subject: Re: Client Certificate Authentication Question


> Dan Tran wrote:
> > The question here is how to I configure EasySSLProtocolSocketFactory to
handle client certificate?
>
> This is completely implementation dependent.
>
> For JSSE take a look at
>
>
http://java.sun.com/j2se/1.4.1/docs/guide/security/jsse/samples/sockets/client/SSLSocketClientWithClientAuth.java
>
> HTH
>
> Odi
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
commons-httpclient-dev-unsubscribe@jakarta.apache.org
> For additional commands, e-mail:
commons-httpclient-dev-help@jakarta.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: commons-httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-httpclient-dev-help@jakarta.apache.org

Re: Client Certificate Authentication Question

Posted by Ortwin Glück <or...@nose.ch>.
Dan Tran wrote:
> The question here is how to I configure EasySSLProtocolSocketFactory to handle client certificate?

This is completely implementation dependent.

For JSSE take a look at

http://java.sun.com/j2se/1.4.1/docs/guide/security/jsse/samples/sockets/client/SSLSocketClientWithClientAuth.java

HTH

Odi


---------------------------------------------------------------------
To unsubscribe, e-mail: commons-httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-httpclient-dev-help@jakarta.apache.org