English 中文(简体)
如何核实组合相互认证的正确性(客户证书、服务器证书) Java EE?
原标题:How to verify the correctness of configuring mutual authentication (client certificate, server certificate) Java EE?

我正试图撰写一份简单的申请,以了解根据客户和服务器证书进行认证的基础。

I have done everything as it is explained in jave ee 5, java ee 6 tutorials http://docs.oracle.com/javaee/6/tutorial/doc/glien.html

  1. Opened example from javaee tutorials hello basicauthorization (just simple servlet which can be accessed only after authentication) and then reconfigured it for client certificates instead of basic authorizations
  2. Configured web.xml
  3. Configured glassfish-web.xml
  4. Generated client certificate
  5. Imported client certificate so that the server would trust it.

问题:

当我部署我的申请并沿用与申请相应的链接时,我从玻璃鱼服务器(HTTP)获得电文400——在这一请求中没有客户证明链条”。

因此,看来客户(浏览器)没有按照要求发送证书。

我试图在 Chrome、火f、互联网探索器上添加 certificate证书,并添加(没有显示错误),但正如你看到的那样,没有帮助。

因此,问题是:

如何通过有客户的网络浏览器获得我的申请?

最佳回答

可以通过增加(玻璃鱼的有些地方)系统特性,在服务器上消减 s素:

-Djavax.net.debug=all

see this page for details.

你们也可以从客户的角度利用开放式工具进行欺骗:

openssl s_client -connect host:port -debug -msg

你们应当看到这样的情况:

...
Acceptable client certificate CA names
/C=PL/O=company/OU=xx/CN=host/[email protected]
/C=PL/O=company/OU=xx/CN=ca/[email protected]
---
SSL handshake has read 2536 bytes and written 116 bytes
...

贵问题很可能与服务器-服务器-服务器-服务器发送了一些的可接受客户证书CA(或根本没有)有关,但浏览器没有可以提供的任何东西——tsn t有任何私人钥匙+certificate,由可接受的签发。

问题回答

暂无回答




相关问题
Spring Properties File

Hi have this j2ee web application developed using spring framework. I have a problem with rendering mnessages in nihongo characters from the properties file. I tried converting the file to ascii using ...

Logging a global ID in multiple components

I have a system which contains multiple applications connected together using JMS and Spring Integration. Messages get sent along a chain of applications. [App A] -> [App B] -> [App C] We set a ...

Java Library Size

If I m given two Java Libraries in Jar format, 1 having no bells and whistles, and the other having lots of them that will mostly go unused.... my question is: How will the larger, mostly unused ...

How to get the Array Class for a given Class in Java?

I have a Class variable that holds a certain type and I need to get a variable that holds the corresponding array class. The best I could come up with is this: Class arrayOfFooClass = java.lang....

SQLite , Derby vs file system

I m working on a Java desktop application that reads and writes from/to different files. I think a better solution would be to replace the file system by a SQLite database. How hard is it to migrate ...

热门标签