Sorry, I want to be able to validate the client cert within the
application servlet.
On 6/26/2013 6:56 PM, Bill Burke wrote:
I think you misunderstood me. Not looking for client-cert auth. I
want
to be able to validate the client server within the application servlet.
On 6/26/2013 6:50 PM, Tomaz Cerar wrote:
> It can do it already but config is going to change in future.
>
> Take a look at WebCERTTestsSecurityDomainSetup in testsuite on how to do it.
>
> Basicly you have to setup securityRealm with server ssl cert, then setup
> securtiy constraints for web app
>
> That test we have in testsuite also tests mapping client certs to users via
> CertificateRoles security module.
>
> --
> tomaz
>
>> -----Original Message-----
>> From: undertow-dev-bounces(a)lists.jboss.org [mailto:undertow-dev-
>> bounces(a)lists.jboss.org] On Behalf Of Bill Burke
>> Sent: Thursday, June 27, 2013 12:11 AM
>> To: undertow-dev(a)lists.jboss.org
>> Subject: [undertow-dev] certs
>>
>> I need to be able to client certs in the following manner:
>>
>> * Set the server to WANT client certs so that it is optional
>> * Obtain certificate at the servlet layer so I can validate it myself.
>>
>> Can Undertow do these yet? Just want to know so I can create the
>> appropriate jiras.
>>
>> --
>> Bill Burke
>> JBoss, a division of Red Hat
>>
http://bill.burkecentral.com
>> _______________________________________________
>> undertow-dev mailing list
>> undertow-dev(a)lists.jboss.org
>>
https://lists.jboss.org/mailman/listinfo/undertow-dev
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com