Re: [undertow-dev] certs

Sorry, I want to be able to validate the client cert within the application servlet. On 6/26/2013 6:56 PM, Bill Burke wrote: > I think you misunderstood me. Not looking for client-cert auth. I want > to be able to validate the client server within the application servlet. > > On 6/26/2013 6:50 PM, Tomaz Cerar wrote: >> It can do it already but config is going to change in future. >> >> Take a look at WebCERTTestsSecurityDomainSetup in testsuite on how to do it. >> >> Basicly you have to setup securityRealm with server ssl cert, then setup >> securtiy constraints for web app >> >> That test we have in testsuite also tests mapping client certs to users via >> CertificateRoles security module. >> >> -- >> tomaz >> >>> -----Original Message----- >>> From: undertow-dev-bounces(a)lists.jboss.org [mailto:undertow-dev- >>> bounces(a)lists.jboss.org] On Behalf Of Bill Burke >>> Sent: Thursday, June 27, 2013 12:11 AM >>> To: undertow-dev(a)lists.jboss.org >>> Subject: [undertow-dev] certs >>> >>> I need to be able to client certs in the following manner: >>> >>> * Set the server to WANT client certs so that it is optional >>> * Obtain certificate at the servlet layer so I can validate it myself. >>> >>> Can Undertow do these yet? Just want to know so I can create the >>> appropriate jiras. >>> >>> -- >>> Bill Burke >>> JBoss, a division of Red Hat >>> http://bill.burkecentral.com >>> _______________________________________________ >>> undertow-dev mailing list >>> undertow-dev(a)lists.jboss.org >>> https://lists.jboss.org/mailman/listinfo/undertow-dev >> >