Re: [ebxmlms-general] Requesting Client Authentication

[Patrick Y. <kc...@ce...>]

Hi Joseph,

You can find this fragment in msh.properties.xml:

<ClientAuth>
<URL>https://147.8.178.159:8443/msh/</URL>
<KeyStore>
<Path></Path>
<File>my_keystore</File>
<Alias>ackkey</Alias>
<Password>changeit</Password>
</KeyStore>
</ClientAuth>

The <ClientAuth> element can be repeating, for each outgoing URL Hermes=20
is trying to connect using client authentication. As you see, you=20
specify the outgoing URL on which client authentication should be used,=20
the path, file name, alias and password of the keystore file holding the=20
key.

Hope this helps.

Regards, -Patrick



Portelli, Joe F wrote:

> Hermes=92 configuration file (msh.properties.xml) allows for SSL Server=
=20
> and Client Authentication. I defined the entries in=20
> <MSH>SSH<TrustedAnchor><Keystore> and enabled server authentication =96=
=20
> that is Hermes now authenticates other MSH=92s (servers) it is=20
> attempting to set up a session with.
>
> What I would like to know is how to activate Client Authentication in=20
> Hermes ie how to get Hermes to initiate a remote client authentication=20
> process.
>
> Regards
>
> Joseph F. Portelli
>
> Telstra Research Laboratories
>
> ( +61 (0)2 8255 3099
>
> 7 +61 (0)2 8255 3153
>
> =9C 3/400 George Street, Sydney, NSW 2000
>
> =9A _<_mailto:joe...@te....com_>___
>