Re: how to handle server auth during SSL connection through HttpClient

[Oleg Kalnichevski <ol...@apache.org>]

On Fri, 2008-03-07 at 08:12 +0800, Xiao.L.Liu@Seagate.com wrote:
> Hi
> 
>       I'm quite satisfied with newest HttpClient (version is
> httpcomponents-client-4.0-alpha3), but I encounter a difficulty now.
> 
>       It supports secure connections with a custom SSL context
> (refer to
> http://svn.apache.org/repos/asf/httpcomponents/httpclient/trunk/module-client/src/examples/org/apache/http/examples/client/ClientCustomSSL.java
> ), however, I'd like to know whether it supports Server Authentication. I
> mean the server asks for a client certificate during the SSL handshake. Via
> latest HttpClient, may I upload a client certificate to server for
> authentication?

Yes, you may

>  If does, what should I do?
> 

Create a keystore containing the private key to be used for
authentication with the server and configure the SSLSocketFactory to
load the key from that keystore. 

Do not confuse a keystore with a truststore.

Hope this helps

Oleg  


>       I need some advice from you.
> 
>       Thanks a lot
> 
> Thanks & Regards,
> Liu Xiao
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
> For additional commands, e-mail: httpclient-users-help@hc.apache.org
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-users-unsubscribe@hc.apache.org
For additional commands, e-mail: httpclient-users-help@hc.apache.org