Client Authentication using SSL

import java.security.cert.X509CRL;
import java.security.cert.X509Certificate;
import java.security.cert.CertificateFactory;
import java.security.cert.CertificateExpiredException;
import java.security.cert.CertificateNotYetValidException;


try {
 FileInputStream fis   = new FileInputStream(CRLfile);

 CertificateFactory cf = CertificateFactory.getInstance("X.509");

 X509CRL CRLList = (X509CRL)cf.generateCRL(fis);
 fis.close();
}
catch()...

....
try {

String cipherSuite = (String) request.getAttribute("javax.net.ssl.cipher_suite");
out.println("Cipher Suite: " + cipherSuite);

if (cipherSuite != null) {
   X509Certificate certChain[] =(X509Certificate[])
request.getAttribute("javax.net.ssl.peer_certificates");
   if (certChain != null) {
      for (int i = 0; i < certChain.length; i++) {
         out.println ("Client Cert [" + i + "] = " + certChain[i].toString());
      }

      // This could throw InvalidCert exceptions:
      certChain[0].checkValidity();
   
     if (CRLList != null && CRLList.isRevoked(certChain[0]))
        throw new Exception("Revoked SSL Certificate");
     }
}
   catch (CertificateExpiredException cee) {
     throw new Exception("Expired SSL Certificate");
  }
   catch (CertificateNotYetValidException cnyve) {
     throw new Exception("Invalid SSL Certificate");
  }
   catch (Exception e) {
    if (e.getMessage().equals("Revoked SSL Certificate") ||
        e.getMessage().equals("Non-SSL access disabled"))
       throw e;
    else
       throw new Exception("Invalid SSL Certificate");

# UPDATE TOMCAT--START
include H:/httpd/jakarta-tomcat-3.3/conf/auto/mod_jk.conf

# Should mod_jk send SSL information to Tomcat (default is On)
JkExtractSSL On
# What is the indicator for SSL (default is HTTPS)
JkHTTPSIndicator HTTPS
# What is the indicator for SSL session (default is SSL_SESSION_ID)
JkSESSIONIndicator SSL_SESSION_ID
# What is the indicator for client SSL cipher suit (default is SSL_CIPHER)
JkCIPHERIndicator SSL_CIPHER
# What is the indicator for the client SSL certificated (default is
SSL_CLIENT_CERT)
JkCERTSIndicator SSL_CLIENT_CERT

# UPDATE TOMCAT--END

Senya,

Thanks a lot for that answer. But the problem is I am using Tomcat 4.0.1 in which you dont have any configuration files said by you. For ex: "H:/httpd/jakarta-tomcat-3.3/conf/auto/mod_jk.conf". I guess you need to modify only server.xml in Tomcat 4.0.1. SSL is working fine for me on this server. I have put your code & when I execute, I get all the values "Null". This is how the connector looks in server.xml

    <!-- Define an SSL HTTP/1.1 Connector on port 8443 -->
   
    <Connector className="org.apache.catalina.connector.http.HttpConnector"
               port="443" minProcessors="5" maxProcessors="75"
               enableLookups="true"
            acceptCount="10" debug="0" scheme="https" secure="true">
      <Factory className="org.apache.catalina.net.SSLServerSocketFactory"
               clientAuth="true" protocol="TLS"/>
    </Connector>

Do I need to do any more changees?? Please let me know asap becoz this is very urgent for me.

Regards,

..Raj

Please click this link and update/finalize your open and locked questions.  If this LOCKED question does not serve your needs, please REJECT it.

https://www.experts-exchange.com/jsp/memberProfile.jsp?mbr=raj2476&showQHistory=true

Moondancer - EE Moderator

This solution may work for Tomcat 3.x. But for 4.x it does not give any clue for me. I have replied the same, but no further answer from Senya. So the answer is not useful for me.

It has been a long time since I asked the question. I worked out on my own & got the solution.

hi raj,
since u adi found the solution.. why not u post it here and share it qith all of us...
thanks..:-)