Tomcat 4.0 Standalone and client certificates

[Shimon Crown <sh...@equipnet.co.il>]

This has been asked before (see David Heggie below) but I don't see a
definitive answer from anyone.

Has anyone managed to get Tomcat 4.0 standalone to accept client
certificates ? For the record I followed exactly the same path that David
did and got the same lousy results.

Shimon Crown

Quote from David's post
____________________________________________________________________________
_______________________________________________


From: David Heggie
Subject:  Client Certificates with Tomcat 4 standalone
Date:  Thu, 11 Oct 2001 09:20:43 +1000

Hi,

I have been trying to set up client-cert authentication and have had
no
success at present. The first attempt was to set up ssl and set
clientAuth
to true.

<Connector
className="org.apache.catalina.connector.http.HttpConnector"
               port="8443" minProcessors="5" maxProcessors="75"
               enableLookups="true"
        acceptCount="10" debug="1" scheme="https" secure="true">
      <Factory
className="org.apache.catalina.net.SSLServerSocketFactory"
               clientAuth="true" protocol="TLS"/>
</Connector>

The normal ssl works fine with clientAuth=false but when it is true
the
browser comes up with an error "the page cannot be displayed".

My second attampt was to setup the default web-app
security/protected
example to use CLIENT-AUTH auth.

<login-config>
      <auth-method>CLIENT-CERT</auth-method>
      <realm-name>Example Form-Based Authentication
Area</realm-name>
</login-config>

When I browse to that directory the browser comes up with the same
error but
this time the following is in the localhost_examples log.

CertificatesValve[/examples]:  verify: SSLPeerUnverifiedException

Does anyone know what this means, or how I can get this client
certificate
thing working.

Thanks

David
____________________________________________________________________________
_______________________________________________