|
Description:
|
In the resin documentation it lists the verify-client setting for Open SSL based certificate authentication. A little experimentation lead me to discover that this setting worked for JSSE connections as well. Well, sort of works - required will require a certificate correctly, but Optional isn't implemented.
This would be easy to add - insert this snippet:
if ("optional".equals(_verifyClient))
sslServerSocket.setWantClientAuth(true);
on line 265 of com.caucho.vfs.JsseSSLFactory.java (just above the "required" section) and Resin will request certificates from the browser but will carry on if none is supplied. |