The tag has no wiki summary.

learn more… | top users | synonyms

2
votes
2answers
373 views

Can I restrict SSL access to Tomcat by Extended Key Usage?

I'd like to restrict the SSL access to a Tomcat instance using certificates, and not relying on any "user" accounts. I have a CA which is being used to sign the certificates, but if I configure ...
2
votes
1answer
88 views

Alternatives to a Trusted Root certificate

Given a SSL-protected site that was formerly whitelisted (Allow from x.x.x.x etc), and and a requirement from a customer to change the way authentication works, to use X.509 HTTPS Client verification. ...
0
votes
1answer
549 views

SSL certificate for Oracle Application Server 11g

I was asked to get an SSL certificate for an "Oracle Application Server 11g" which has a soon-to-expire certificate. Brushing aside the fact that 10g seems to be the newest version, I got a ...
0
votes
1answer
109 views

How can you get x509 to work with Trac?

Hi I have been trying to find a way to get x509 certs for authentication for Trac but I could not find any plugins on TracHacks or tutorials on this. The closest I've seen so far is this post on ...
8
votes
0answers
233 views

OCSP responder not present?

Am trying to set up OCSP validation routines, and so want to be comfortable with the environment first. Found excellent tutorials at for example OpenSSL: Manually verify a certificate against an ...
1
vote
0answers
30 views

Can OpenDirectory on OS X reasonably be configured to use an intermediate CA cert from an existing CA?

We're trying to set up OpenDirectory. It seems to want to create its own CA, and then an intermediate CA with a certificate signed by its own CA. I'd prefer to generate an intermediate CA certificate ...
1
vote
0answers
124 views

apache/mod_gnutls ssl certificate based authentication

I'm using apache with gnutls. I've configured both to request authentication from the client. When providing the certificate it works. But it works also if I provide another that the correct ...
1
vote
0answers
157 views

Apache SSL x509 authentication timeout

I have setup a location to enable client authentication based on x509 certificates: <Location /authenticate> SSLRequireSSL SSLVerifyClient require SSLVerifyDepth 10 </Location> ...
0
votes
0answers
36 views

Set IIS to Require SSL + Require Client Certificate on requests from localhost?

So, This is my scenario: I have a WCF service application which is invoked by the cruel and mean outside world, and it is hosted in IIS to REQUIRE both SSL and client certificate. I.e. no ...
0
votes
0answers
80 views

Configuring Oracle Access Manager to use x509 authentication

Hello members of Serverfault, I am new to serverfault and my knowledge of Oracle Access Manager(OAM) and x509 authentication is minimal. I have attempted searching the rest of serverfault and have ...
0
votes
0answers
59 views

Apache + Jboss checking the X.509 certificate status

I am developing a web app using Apache http + Jboss + AJP Protocol. Users authenticate using their X.509 certificate, stored in their smartcards. When browser asks the users for their cards PIN they ...