[Jboss-dev-forums] [Design of JBoss Portal] - Re: Certificate Authentication

[<sco...@jb...>]

Then you have not understood the BaseCertLoginModule/JaasSecurityDomain. It can have a distinct trust store for validation of the client cert at the transport level and another for validation of the client cert. Reread the BaseCertLoginModule as of the 4.0.2 release there is also a pluggable certificate validator interface that can perform the client cert check anyway it wants.

View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3875454#3875454

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3875454