SSL + EJBCA + JBoss

[claudio]

Hi, maybe my problem has been already solved but I can't find any help elsewhere so ... the point.
I would like to secure an application (in JBoss) using the SSL client authentication, the EJBCA project (on SourceForge) as the Certification Authority using this approach:
- I generate certificates for my users using EJBCA and I want these certificates to be stored in the DB,
- I enable the SSL layer (possibly for my application only)
- I would like to have the user informations available to my JSP and EJB.

Anyone has some tips to let me do that?
Thank you.

[pkghosh]

I am in a similar situation. I want my ejb to accessed by certified clients. If you have any solution, please share.

Pranab

[dcrot]

I also need this functionality. For what its worth I tried implementing my own RMISSLServerSocketFactory and called setNeedClientAuth(true) on the SSL server socket. Unfortunately this didnt work, as my client connected even though I didnt set its keystore.

[fred_soulier]

Hi,

I've been able to use RMI+SSL (server authentication) using the tips on this web site:

http://www.lowagie.com/techtips/

No luck from a fresh JBoss install (3.0.0 or 3.1.0alpha from CVS)

/Fred