RE: [ebxmlms-develop] Client certificate authentication

[Ronald v. K. <rv...@ab...>]

Anyone already started working on this... Otherwise I'll be glad to look a
little into this since we need it as well?

-----Oorspronkelijk bericht-----
Van: Patrick Yee [mailto:kc...@ce...]
Verzonden: woensdag 12 maart 2003 6:02
Aan: ebx...@li...
Onderwerp: Re: [ebxmlms-develop] Client certificate authentication


Unfortunately, Hermes is not supporting the use of client certificate
authentication right now. -Patrick

----- Original Message ----- 
From: Mayne, Peter <mailto:Pet...@ap...>  
To: 'ebx...@li...'
<mailto:'ebx...@li...'>  
Sent: Wednesday, March 12, 2003 12:55 PM
Subject: [ebxmlms-develop] Client certificate authentication


I'm trying to send ebXML messages to an HTTPS site that requires client
certificate authentication. 

I have the HTTPS part working, but only by putting the web site's
certificate's CA certificate in the JAVA_HOME\jre\lib\security\cacerts file.
Hermes doesn't seem to be seeing my definitions of javax.net.ssl.trustStore
and javax.net.ssl.trustStorePassword.

Since it doesn't see those definitions, it probably won't see my definition
of javax.net.ssl.keyStore et al either. 

What is the recommended way of telling Hermes where a trustStore is, and
what client certificate to use when authenticating to an HTTPS site?

Thanks. 

PJDM 
-- 
Peter Mayne 
Technology Consultant 
Spherion Technology Solutions 
Level 1, 243 Northbourne Avenue, Lyneham, ACT, 2602 
T: 61 2 62689727  F: 61 2 62689777 


The information contained in this email and any attachments to it:



(a) may be confidential and if you are not the intended recipient, any
interference with, 

use, disclosure or copying of this material is unauthorised and prohibited;
and



(b) may contain personal information of the recipient and/or the sender as
defined 

under the Privacy Act 1988 (Cth). Consent is hereby given by the
recipient(s) to 

collect, hold and use such information and any personal information
contained in a 

response to this email, for any reasonable purpose in the ordinary course of


Spherion's 

business, including forwarding this email internally or disclosing it to a
third party. All 

personal information collected by Spherion will be handled in accordance
with 

Spherion's Privacy Policy. If you have received this email in error, please
notify the 

sender and delete it.



(c) you agree not to employ or arrange employment for any candidate(s)
supplied in 

this email and any attachments without first entering into a contractual
agreement with 

Spherion. You further agree not to divulge any information contained in this
document 

to any person(s) or entities without the express permission of Spherion.