Filip Bogyai created WFLY-2810: ---------------------------------- Summary: HTTPS undertow listener request client certificate despite verify-client=NOT_REQUESTED Key: WFLY-2810 URL: https://issues.jboss.org/browse/WFLY-2810 Project: WildFly Issue Type: Bug Security Level: Public (Everyone can see) Components: Web (Undertow) Affects Versions: 8.0.0.CR1 Reporter: Filip Bogyai Assignee: Stuart Douglas Priority: Minor HTTPS undertow listener has 3 options for verify-client parameter: NOT_REQUESTED (Default), REQUESTED, REQUIRED. If it is set to NOT_REQUESTED (the default), it should not require a certificate chain unless the client requests a resource protected by a security constraint that uses CLIENT-CERT authentication. But when I tried to access unsecured resource as first, it requested certificate. (It behaves same as verify-client is set to REQUESTED) -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira