0 Replies Latest reply on Mar 19, 2002 9:59 AM by mario

    JBoss 2.4.4 Tomcat 4.0.1 client authentication

    mario

      Hi,

      We're using client authentication with the JBoss 2.4.4. Tomcat 4.0.1 version.

      We created a test server certificate from Thawte (we also tested it with a self signed server certificate generated with keytool).

      In the jboss.jcml we configured the EmbeddedCatalinaSX mbean for security, to use the above mentioned keystore.

      We also set the javax.net.ssl.truststore parameter in our startup, which points to the truststore where a root for VeriSign client certificates is placed, and a root for client certificates from Phaos (which we generate ourselves).

      If we access the server, in our browser we can only select a VeriSign client certificate. The Phaos client certificates are not shown???

      We have even removed the Verisign root from our truststore, but the browser still only displays the VeriSign client certificates, and not the Phaos ones.

      Are we missing something here?

      Thanx in advance,
      Mario