[jboss-user] [Security & JAAS/JBoss] - Configuring SOAP over SSL

[knatarajan]

Hi,
We have a web server front-ending an app server. 
When a browser accesses a URL served by the web server through HTTPS we do not want the web server to require a client certificate to be presented.
However when a web service client accesses the Web Server to invoke a web service operation we want to require that the client certificate be presented to enable strong authentication.
Is it possible to do this separation on a single web server ?

Thanks,
K


View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3961667#3961667

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=3961667