AnyCertVerifier

[rpa_rio]

I tried to use DatabaseCertLoginModule with AnyCertVerifier option and i still need to use a truststore in jbossweb server.xml, this is correct? If yes i still need to import the client certificates in truststore and this is a problem to me since i create the users dynamically...

[rpa_rio]

Any tips?

[rpa_rio]

Please i need some orientation in this part.

[starksm64]

The truststore is needed by the transport layer to validate who signed the client certs. There is no need to include every cert in the truststore. The AnyCertVerifier simply allows the authentication via JAAS to avoid needing the client certs.

[rpa_rio]

So i need to import into truststore the server.cer file if i self sign client certs?

[rpa_rio]

I found the solution by simple signing both server and client certificates and storing the ca certificate into server truststore.