I think you misunderstood me. Not looking for client-cert auth. I want
to be able to validate the client server within the application servlet.
On 6/26/2013 6:50 PM, Tomaz Cerar wrote:
It can do it already but config is going to change in future.
Take a look at WebCERTTestsSecurityDomainSetup in testsuite on how to do it.
Basicly you have to setup securityRealm with server ssl cert, then setup
securtiy constraints for web app
That test we have in testsuite also tests mapping client certs to users via
CertificateRoles security module.
--
tomaz
> -----Original Message-----
> From: undertow-dev-bounces(a)lists.jboss.org [mailto:undertow-dev-
> bounces(a)lists.jboss.org] On Behalf Of Bill Burke
> Sent: Thursday, June 27, 2013 12:11 AM
> To: undertow-dev(a)lists.jboss.org
> Subject: [undertow-dev] certs
>
> I need to be able to client certs in the following manner:
>
> * Set the server to WANT client certs so that it is optional
> * Obtain certificate at the servlet layer so I can validate it myself.
>
> Can Undertow do these yet? Just want to know so I can create the
> appropriate jiras.
>
> --
> Bill Burke
> JBoss, a division of Red Hat
>
http://bill.burkecentral.com
> _______________________________________________
> undertow-dev mailing list
> undertow-dev(a)lists.jboss.org
>
https://lists.jboss.org/mailman/listinfo/undertow-dev
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com