From httpclient-user-returnsamanthafuller@example.net Wed Mar 07 19:59:36 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 82989 invoked from network); 7 Mar 2007 19:59:36 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 7 Mar 2007 19:59:36 -0000 Received: (qmail 62467 invoked by uid 500); 7 Mar 2007 19:59:44 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 62327 invoked by uid 500); 7 Mar 2007 19:59:43 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 62315 invoked by uid 99); 7 Mar 2007 19:59:43 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 07 Mar 2007 11:59:43 -0800 X-ASF-Spam-Status: No, hits=2.0 required=10.0 tests=HTML_MESSAGE,SPF_PASS,UNPARSEABLE_RELAY X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of samanthafuller@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO frasmtp3.staples.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 07 Mar 2007 11:59:32 -0800 Received: from ([83.161.120.155]) by frasmtp3.staples.com with ESMTP id KP-BPZTY.119677945; Wed, 07 Mar 2007 14:58:44 -0500 Received: from fraexims3.staples.com (Not Verified[83.161.120.155]) by fracf1.staples.com with NetIQ MailMarshal (v83.161.120.155) id <BA05a79587>; Wed, 07 Mar 2007 14:58:44 -0500 Received: by fraexims3.staples.com with Internet Mail Service (5.5.2656.59) id <FJ1Q8N59>; Wed, 7 Mar 2007 14:58:43 -0500 Message-ID: <samanthafuller@example.net> From: "Sharma, Siddharth" <samanthafuller@example.net> To: HttpClient User Discussion <samanthafuller@example.net> Subject: Set connect timeout Date: Wed, 7 Mar 2007 14:58:31 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2656.59) Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C760F2.FA323592" X-Virus-Checked: Checked by ClamAV on apache.org ------_=_NextPart_001_01C760F2.FA323592 Content-Type: text/plain Is there a way to set a connect timeout per host configuration? I am using a single HttpClient instance with MultiThreadedHttpConnectionManager and am setting the connect timeout at the manager level. HttpConnectionManagerParams.setConnectionTimeout(int) The side-effect of this is that all hosts get the same connect timeout value. Some target hosts are on the internet and some are within the intranet and I need the ability to be able to set it per host. Thanks in advance Sid ------_=_NextPart_001_01C760F2.FA323592-- From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 07:47:34 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 50571 invoked from network); 8 Mar 2007 07:47:34 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 07:47:34 -0000 Received: (qmail 73563 invoked by uid 500); 8 Mar 2007 07:47:41 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 73551 invoked by uid 500); 8 Mar 2007 07:47:41 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 73540 invoked by uid 99); 8 Mar 2007 07:47:41 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 07 Mar 2007 23:47:41 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of samanthafuller@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO mtagate2.de.ibm.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 07 Mar 2007 23:47:30 -0800 Received: from d12nrmr1607.megacenter.de.ibm.com (d12nrmr1607.megacenter.de.ibm.com [83.161.120.155]) by mtagate2.de.ibm.com (8.13.8/8.13.8) with ESMTP id l287l855025418 for <samanthafuller@example.net>; Thu, 8 Mar 2007 07:47:08 GMT Received: from d12av02.megacenter.de.ibm.com (d12av02.megacenter.de.ibm.com [83.161.120.155]) by d12nrmr1607.megacenter.de.ibm.com (8.13.8/8.13.8/NCO v8.3) with ESMTP id l287l78L2191536 for <samanthafuller@example.net>; Thu, 8 Mar 2007 08:47:07 +0100 Received: from d12av02.megacenter.de.ibm.com (loopback [83.161.120.155]) by d12av02.megacenter.de.ibm.com (83.161.120.15560308/8.13.3) with ESMTP id l287l7DR013262 for <samanthafuller@example.net>; Thu, 8 Mar 2007 08:47:07 +0100 Received: from d12ml067.megacenter.de.ibm.com (d12ml067.megacenter.de.ibm.com [83.161.120.155]) by d12av02.megacenter.de.ibm.com (83.161.120.15560308/8.12.11) with ESMTP id l287l7WS013259 for <samanthafuller@example.net>; Thu, 8 Mar 2007 08:47:07 +0100 In-Reply-To: <samanthafuller@example.net> To: "HttpClient User Discussion" <samanthafuller@example.net> Subject: Re: Set connect timeout MIME-Version: 1.0 X-Mailer: Lotus Notes Release 7.0 HF144 February 01, 2006 From: Roland Weber <samanthafuller@example.net> X-MIMETrack: S/MIME Sign by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 08:46:58, Serialize by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 08:46:58, Serialize samanthafuller@example.net 08:46:58, Itemize by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 08:46:58, S/MIME Sign samanthafuller@example.net 08:46:58, S/MIME Sign by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 08:47:05, S/MIME Sign samanthafuller@example.net 08:47:05, Serialize by Router on D12ML067/12/M/IBM(Release 7.0.2HF71 | November 3, 2006) at 08/03/2007 08:47:06, Serialize complete at 08/03/2007 08:47:06 Message-ID: <samanthafuller@example.net> Date: Thu, 8 Mar 2007 08:47:05 +0100 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary=-------z10351_boundary_sign X-Virus-Checked: Checked by ClamAV on apache.org ---------z10351_boundary_sign Content-Type: text/plain; charset="US-ASCII" Hello Sid, set the timeout in the method parameters. cheers, Roland ---------z10351_boundary_sign Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIIdrAIBATELMAkGBSsOAwIaBQAwCwYJKoZIhvcNAQcBoIIbLDCCAwMw ggJsAhEAuS9gzIifoXpGCbhbcGyKrzANBgkqhkiG9w0BAQUFADCBwTELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENl cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAxOTk4IFZlcmlTaWduLCBJ bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5l dHdvcmswHhcNOTgwNTE4MDAwMDAwWhcNMjgwODAxMjM1OTU5WjCBwTELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENl cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAxOTk4IFZlcmlTaWduLCBJ bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5l dHdvcmswgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKeIASF0LOcaA/CY4Zc8DyEI8Zzbl+ma /MIEBhO+X1LIzB4sElYsuAFpLMyZH62wlq55BPITOcF7mLoILOjChBMsqmnpCfTHqQKkQsIjT0rY 8A6i+zFsyeZvmScH9eb0THiebetGhvq5hslU8rLEr9RGHFrJFTD/DWz1LQ5tzn93AgMBAAEwDQYJ KoZIhvcNAQEFBQADgYEAci75f9HxcfvEnvbFXlGKQJi4aPibHIPY4p29/+2h5mbqLwn0ytfqpSuV 9iRghk1ELoOlxC2g0654aW9y2myuCPBjkjfmu8QwF613zEk1qs/Yj9G+txiWR3NqVCI0ZC22FptZ W7RRWTqzCxT0Et9noPStMmResUZyJ4wSe8VEtK4wggMDMIICbAIRALkvYMyIn6F6Rgm4W3Bsiq8w DQYJKoZIhvcNAQEFBQAwgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE8 MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt IEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz ZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMB4XDTk4MDUxODAwMDAwMFoX DTI4MDgwMTIzNTk1OVowgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE8 MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt IEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz ZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMIGfMA0GCSqGSIb3DQEBAQUA A4GNADCBiQKBgQCniAEhdCznGgPwmOGXPA8hCPGc25fpmvzCBAYTvl9SyMweLBJWLLgBaSzMmR+t sJaueQTyEznBe5i6CCzowoQTLKpp6Qn0x6kCpELCI09K2PAOovsxbMnmb5knB/Xm9Ex4nm3rRob6 uYbJVPKyxK/URhxayRUw/w1s9S0Obc5/dwIDAQABMA0GCSqGSIb3DQEBBQUAA4GBAHIu+X/R8XH7 xJ72xV5RikCYuGj4mxyD2OKdvf/toeZm6i8J9MrX6qUrlfYkYIZNRC6DpcQtoNOueGlvctpsrgjw Y5I35rvEMBetd8xJNarP2I/RvrcYlkdzalQiNGQtthabWVu0UVk6swsU9BLfZ6D0rTJkXrFGcieM EnvFRLSuMIIFLDCCBJWgAwIBAgIQOHHBU5PI6PSfHgxNDfRmQzANBgkqhkiG9w0BAQUFADCBwTEL MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1 YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAx OTk4IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZl cmlTaWduIFRydXN0IE5ldHdvcmswHhcNMDMwNTA2MDAwMDAwWhcNMDgwNTA1MjM1OTU5WjCB+TEL MAkGA1UEBhMCVVMxNDAyBgNVBAoTK0ludGVybmF0aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29y cG9yYXRpb24xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1z IG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTAzMTAwLgYDVQQLEydD bGFzcyAyIE9uU2l0ZSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0ExJDAiBgNVBAMTG0lCTSBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA1WetNd2gfv1X YdadpxfLuaONI1yc6Ldn5xdIGH25IOEIsBRR66+ge5u4DkiaskjmT90D5DQv5Y3NHs5mvhNGnDcM 6SxhL/Sj5Fnn6W4nuW1dx1WCwdTqqocOm8XWEB6Cqk3PrvQlVV9SzhOELUBp8wgEfCYluoUbgjLf 04ffugECAwEAAaOCAekwggHlMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgB hvhFAQcXAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMDQGA1Ud HwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTItZzIuY3JsMAsGA1UdDwQE AwIBBjARBglghkgBhvhCAQEEBAMCAQYwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVM YWJlbDItMTI3MB0GA1UdDgQWBBSRwXOwc9XZknRnzRvxURQ0MbYsWjCB6AYDVR0jBIHgMIHdoYHH pIHEMIHBMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xPDA6BgNVBAsTM0Ns YXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMjE6MDgGA1UE CxMxKGMpIDE5OTggVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTEfMB0G A1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29ya4IRALkvYMyIn6F6Rgm4W3Bsiq8wDQYJKoZIhvcN AQEFBQADgYEACBgFEwMbNSXwLj3nIObITvxAdLFCOSkpsnrWLQaRJgZSaRFhzdzMpSWRXex0dZ7b yy7RJE7wcqFfN9R1HYPafpSLE5GZH+2hua7GWR/CodYO81W4kPSIJXV7ZxdP2p/fy8zMyILnmVCa cKhR9ODXfWi8z9XUQjZpPXzUda7+kzwwggUsMIIElaADAgECAhA4ccFTk8jo9J8eDE0N9GZDMA0G CSqGSIb3DQEBBQUAMIHBMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xPDA6 BgNVBAsTM0NsYXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBH MjE6MDgGA1UECxMxKGMpIDE5OTggVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ug b25seTEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazAeFw0wMzA1MDYwMDAwMDBaFw0w ODA1MDUyMzU5NTlaMIH5MQswCQYDVQQGEwJVUzE0MDIGA1UEChMrSW50ZXJuYXRpb25hbCBCdXNp bmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29y azE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEg KGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEk MCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDVZ6013aB+/Vdh1p2nF8u5o40jXJzot2fnF0gYfbkg4QiwFFHrr6B7m7gOSJqySOZP 3QPkNC/ljc0ezma+E0acNwzpLGEv9KPkWefpbie5bV3HVYLB1Oqqhw6bxdYQHoKqTc+u9CVVX1LO E4QtQGnzCAR8JiW6hRuCMt/Th9+6AQIDAQABo4IB6TCCAeUwEgYDVR0TAQH/BAgwBgEB/wIBADBE BgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcCMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlz aWduLmNvbS9ycGEwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNh Mi1nMi5jcmwwCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIBBjApBgNVHREEIjAgpB4wHDEa MBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMjcwHQYDVR0OBBYEFJHBc7Bz1dmSdGfNG/FRFDQxtixa MIHoBgNVHSMEgeAwgd2hgcekgcQwgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwg SW5jLjE8MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhv cml0eSAtIEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3Jp emVkIHVzZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrghEAuS9gzIifoXpG CbhbcGyKrzANBgkqhkiG9w0BAQUFAAOBgQAIGAUTAxs1JfAuPecg5shO/EB0sUI5KSmyetYtBpEm BlJpEWHN3MylJZFd7HR1ntvLLtEkTvByoV831HUdg9p+lIsTkZkf7aG5rsZZH8Kh1g7zVbiQ9Igl dXtnF0/an9/LzMzIgueZUJpwqFH04Nd9aLzP1dRCNmk9fNR1rv6TPDCCBVswggTEoAMCAQICEDpI 7jK8y84yt8lIGSpaaPowDQYJKoZIhvcNAQEEBQAwgfkxCzAJBgNVBAYTAlVTMTQwMgYDVQQKEytJ bnRlcm5hdGlvbmFsIEJ1c2luZXNzIE1hY2hpbmVzIENvcnBvcmF0aW9uMR8wHQYDVQQLExZWZXJp U2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cu dmVyaXNpZ24uY29tL3JwYSAoYykwMzEwMC4GA1UECxMnQ2xhc3MgMiBPblNpdGUgSW5kaXZpZHVh bCBTdWJzY3JpYmVyIENBMSQwIgYDVQQDExtJQk0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDYwNjMwMDAwMDAwWhcNMDcwNjMwMjM1OTU5WjCBhjEuMCwGA1UEChQlSW50ZXJuYXRpb25hbCBC dXNpbmVzcyBNYWNoaW5lcyBDb3JwLjEVMBMGA1UEAwwMUm9sYW5kIFdlYmVyMRkwFwYKCZImiZPy LGQBARQJMTExOTU1NzI0MSIwIAYJKoZIhvcNAQkBFhNyb2x3ZWJlckBkZS5pYm0uY29tMIGfMA0G CSqGSIb3DQEBAQUAA4GNADCBiQKBgQDcs6pxO3WyEHvft+4Tn5IoZY3is9B2wCwCO3TVFDjXgnwG IdJO1qajYQeKjtAoRJgJ5WnNOkXyRAIoao5rzRUQSvz6MtvmAd0yD8PpL1+JK89AbXcxAgy5x6Fa J93JRIbm5i70QVp4szsf66E9CNmXeVzLioPnigVdYC9wDART3QIDAQABo4ICUzCCAk8wCQYDVR0T BAIwADALBgNVHQ8EBAMCBaAwZgYDVR0fBF8wXTBboFmgV4ZVaHR0cDovL29uc2l0ZWNybC52ZXJp c2lnbi5jb20vSW50ZXJuYXRpb25hbEJ1c2luZXNzTWFjaGluZXNDb3JwQ29ycG9yYXRlQ0lPL0xh dGVzdENSTDCCASkGA1UdIASCASAwggEcMIIBGAYLYIZIAYb4RQEHFwIwggEHMCsGCCsGAQUFBwIB Fh9odHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhLWtyMIHXBggrBgEFBQcCAjCByhqBx05vdGlj ZSBUZXh0PU5PVElDRTogUHJpdmF0ZSBrZXkgbWF5IGJlIHJlY292ZXJlZCBieSBWZXJpU2lnbidz IGN1c3RvbWVyIHdobyBtYXkgYmUgYWJsZSB0byBkZWNyeXB0IG1lc3NhZ2VzIHlvdSBzZW5kIHRv IGNlcnRpZmljYXRlIGhvbGRlci4gIFVzZSBpcyBzdWJqZWN0IHRvIHRlcm1zIGF0IGh0dHBzOi8v d3d3LnZlcmlzaWduLmNvbS9ycGEta3IwHwYDVR0jBBgwFoAUkcFzsHPV2ZJ0Z80b8VEUNDG2LFow HQYDVR0OBBYEFHlDENEPMDfpJWg1SI+v/BGE/aGkMC4GA1UdEQQnMCWgIwYKKwYBBAGCNxQCA6AV DBNyb2x3ZWJlckBkZS5pYm0uY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDARBglg hkgBhvhCAQEEBAMCBaAwDQYJKoZIhvcNAQEEBQADgYEAHu2W5olLXaSXEt63N8kfW8RL0HWG8UZk O0V5gg6UYzLXRj4iMhV/EHP5w/2iK9GvvkA57MoDHaXqRWGMGcTV6qKqstQjyxvTnCIlPlGCB5YL lZSCMsA1YrApD7c05dVzm16h+jgwfUgUtaQOlac9LRfxgQalaal2293YJJnC6kwwggVbMIIExKAD AgECAhA6SO4yvMvOMrfJSBkqWmj6MA0GCSqGSIb3DQEBBAUAMIH5MQswCQYDVQQGEwJVUzE0MDIG A1UEChMrSW50ZXJuYXRpb25hbCBCdXNpbmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UE CxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEgKGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIElu ZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEkMCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9y aXR5MB4XDTA2MDYzMDAwMDAwMFoXDTA3MDYzMDIzNTk1OVowgYYxLjAsBgNVBAoUJUludGVybmF0 aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29ycC4xFTATBgNVBAMMDFJvbGFuZCBXZWJlcjEZMBcG CgmSJomT8ixkAQEUCTExMTk1NTcyNDEiMCAGCSqGSIb3DQEJARYTcm9sd2ViZXJAZGUuaWJtLmNv bTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3LOqcTt1shB737fuE5+SKGWN4rPQdsAsAjt0 1RQ414J8BiHSTtamo2EHio7QKESYCeVpzTpF8kQCKGqOa80VEEr8+jLb5gHdMg/D6S9fiSvPQG13 MQIMucehWifdyUSG5uYu9EFaeLM7H+uhPQjZl3lcy4qD54oFXWAvcAwEU90CAwEAAaOCAlMwggJP MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgWgMGYGA1UdHwRfMF0wW6BZoFeGVWh0dHA6Ly9vbnNpdGVj cmwudmVyaXNpZ24uY29tL0ludGVybmF0aW9uYWxCdXNpbmVzc01hY2hpbmVzQ29ycENvcnBvcmF0 ZUNJTy9MYXRlc3RDUkwwggEpBgNVHSAEggEgMIIBHDCCARgGC2CGSAGG+EUBBxcCMIIBBzArBggr BgEFBQcCARYfaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYS1rcjCB1wYIKwYBBQUHAgIwgcoa gcdOb3RpY2UgVGV4dD1OT1RJQ0U6IFByaXZhdGUga2V5IG1heSBiZSByZWNvdmVyZWQgYnkgVmVy aVNpZ24ncyBjdXN0b21lciB3aG8gbWF5IGJlIGFibGUgdG8gZGVjcnlwdCBtZXNzYWdlcyB5b3Ug c2VuZCB0byBjZXJ0aWZpY2F0ZSBob2xkZXIuICBVc2UgaXMgc3ViamVjdCB0byB0ZXJtcyBhdCBo dHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhLWtyMB8GA1UdIwQYMBaAFJHBc7Bz1dmSdGfNG/FR FDQxtixaMB0GA1UdDgQWBBR5QxDRDzA36SVoNUiPr/wRhP2hpDAuBgNVHREEJzAloCMGCisGAQQB gjcUAgOgFQwTcm9sd2ViZXJAZGUuaWJtLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH AwQwEQYJYIZIAYb4QgEBBAQDAgWgMA0GCSqGSIb3DQEBBAUAA4GBAB7tluaJS12klxLetzfJH1vE S9B1hvFGZDtFeYIOlGMy10Y+IjIVfxBz+cP9oivRr75AOezKAx2l6kVhjBnE1eqiqrLUI8sb05wi JT5RggeWC5WUgjLANWKwKQ+3NOXVc5teofo4MH1IFLWkDpWnPS0X8YEGpWmpdtvd2CSZwupMMYIC WzCCAlcCAQEwggEOMIH5MQswCQYDVQQGEwJVUzE0MDIGA1UEChMrSW50ZXJuYXRpb25hbCBCdXNp bmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29y azE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEg KGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEk MCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhA6SO4yvMvOMrfJSBkqWmj6MAkG BSsOAwIaBQCggaIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDcw MzA4MDc0NjU4WjAjBgkqhkiG9w0BCQQxFgQUddgo1isATzP57P4X+H9+ulsCFp0wQwYJKoZIhvcN AQkPMTYwNDAHBgUrDgMCHTAOBggqhkiG9w0DAgICAIAwCgYIKoZIhvcNAwcwDQYIKoZIhvcNAwIC ASgwDQYJKoZIhvcNAQEBBQAEgYCPv40C3y+m1Yyv0215qMUfiq9yycLj3mYZ5bWslxpD7YZfzPP7 23VFJAWPA/359485qIONfzGAhIzvne1ooCsmY9OAjLPZM02rIm4Mtpb8f97Unkby7tSVI+2V4PvM xDF1lXmZoxGbH71/6yiHEnXr0SZ7selOc3FX9sgTdOX0igAAAAA= ---------z10351_boundary_sign-- From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 10:50:29 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 23320 invoked from network); 8 Mar 2007 10:50:28 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 10:50:28 -0000 Received: (qmail 23843 invoked by uid 500); 8 Mar 2007 10:50:36 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 23827 invoked by uid 500); 8 Mar 2007 10:50:36 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 23816 invoked by uid 99); 8 Mar 2007 10:50:36 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 02:50:36 -0800 X-ASF-Spam-Status: No, hits=2.0 required=10.0 tests=HTML_MESSAGE X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: local policy) Received: from [83.161.120.155] (HELO southendmsg.SONATA.LOCAL) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 02:50:27 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C7616F.A7CAC8BB" Subject: SSL client authentication Date: Thu, 8 Mar 2007 16:20:57 +0530 Message-ID: <samanthafuller@example.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: SSL client authentication Thread-Index: Acdhb6bnwrK53SW3QD6Y5G7rtZoyiw== From: "Lalit Sahoo" <samanthafuller@example.net> To: <samanthafuller@example.net> X-Virus-Checked: Checked by ClamAV on apache.org ------_=_NextPart_001_01C7616F.A7CAC8BB Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, =20 I am using apache http client 3. =20 Can I use one-way SSL for client authentication only? =20 Regards, Lalit ------_=_NextPart_001_01C7616F.A7CAC8BB-- From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 13:04:49 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 61241 invoked from network); 8 Mar 2007 13:04:49 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 13:04:49 -0000 Received: (qmail 82251 invoked by uid 500); 8 Mar 2007 13:04:56 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 82237 invoked by uid 500); 8 Mar 2007 13:04:56 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 82226 invoked by uid 99); 8 Mar 2007 13:04:56 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:04:56 -0800 X-ASF-Spam-Status: No, hits=2.0 required=10.0 tests=HTML_MESSAGE X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: local policy) Received: from [83.161.120.155] (HELO southendmsg.SONATA.LOCAL) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:04:46 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C76182.6B98489F" Subject: Certificate Based Client Authentication Date: Thu, 8 Mar 2007 18:35:18 +0530 Message-ID: <samanthafuller@example.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Certificate Based Client Authentication Thread-Index: AcdhgmulQA+FjCCSSaeQgItcFag0/g== From: "Lalit Sahoo" <samanthafuller@example.net> To: <samanthafuller@example.net> X-Virus-Checked: Checked by ClamAV on apache.org ------_=_NextPart_001_01C76182.6B98489F Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi All, =20 I am using the AuthSSLProtocolSocketFactory example code for SSL and certificate based authentication. =20 I have written following statement: =20 ProtocolSocketFactory socketFactory =3D new = AuthSSLProtocolSocketFactory( keystoreURL, httpConnectParams.keystorePassword,null,null); =20 I am using Weblogic Application Server. =20 But when I am executing the client I am getting following error: =20 javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: No trusted certificate found =20 Is it necessary to provide trust certificate? =20 Can anybody help me in this regard? =20 Regards, Lalit ------_=_NextPart_001_01C76182.6B98489F-- From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 13:14:43 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 65143 invoked from network); 8 Mar 2007 13:14:43 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 13:14:43 -0000 Received: (qmail 97599 invoked by uid 500); 8 Mar 2007 13:14:51 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 97322 invoked by uid 500); 8 Mar 2007 13:14:51 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 97311 invoked by uid 99); 8 Mar 2007 13:14:51 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:14:51 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of samanthafuller@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO mtagate5.de.ibm.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:14:41 -0800 Received: from d12nrmr1607.megacenter.de.ibm.com (d12nrmr1607.megacenter.de.ibm.com [83.161.120.155]) by mtagate5.de.ibm.com (8.13.8/8.13.8) with ESMTP id l28DEJOV236866 for <samanthafuller@example.net>; Thu, 8 Mar 2007 13:14:19 GMT Received: from d12av04.megacenter.de.ibm.com (d12av04.megacenter.de.ibm.com [83.161.120.155]) by d12nrmr1607.megacenter.de.ibm.com (8.13.8/8.13.8/NCO v8.3) with ESMTP id l28DEJbe2175090 for <samanthafuller@example.net>; Thu, 8 Mar 2007 14:14:19 +0100 Received: from d12av04.megacenter.de.ibm.com (loopback [83.161.120.155]) by d12av04.megacenter.de.ibm.com (83.161.120.15560308/8.13.3) with ESMTP id l28DEKhf029055 for <samanthafuller@example.net>; Thu, 8 Mar 2007 14:14:20 +0100 Received: from d12ml067.megacenter.de.ibm.com (d12ml067.megacenter.de.ibm.com [83.161.120.155]) by d12av04.megacenter.de.ibm.com (83.161.120.15560308/8.12.11) with ESMTP id l28DEKHo029052 for <samanthafuller@example.net>; Thu, 8 Mar 2007 14:14:20 +0100 In-Reply-To: <samanthafuller@example.net> To: "HttpClient User Discussion" <samanthafuller@example.net> Subject: Re: SSL client authentication MIME-Version: 1.0 X-Mailer: Lotus Notes Release 7.0 HF144 February 01, 2006 From: Roland Weber <samanthafuller@example.net> X-MIMETrack: S/MIME Sign by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:14:09, Serialize by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:14:09, Serialize samanthafuller@example.net 14:14:09, Itemize by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:14:09, S/MIME Sign samanthafuller@example.net 14:14:09, S/MIME Sign by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:14:17, S/MIME Sign samanthafuller@example.net 14:14:17, Serialize by Router on D12ML067/12/M/IBM(Release 7.0.2HF71 | November 3, 2006) at 08/03/2007 14:14:19, Serialize complete at 08/03/2007 14:14:19 Message-ID: <samanthafuller@example.net> Date: Thu, 8 Mar 2007 14:14:18 +0100 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary=-------z48733_boundary_sign X-Virus-Checked: Checked by ClamAV on apache.org ---------z48733_boundary_sign Content-Type: text/plain; charset="US-ASCII" Hello Lalit, > Can I use one-way SSL for client authentication only? No. The server is always authenticated in an SSL connection. This has nothing to do with HttpClient. hope that helps, Roland ---------z48733_boundary_sign Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIIdrAIBATELMAkGBSsOAwIaBQAwCwYJKoZIhvcNAQcBoIIbLDCCAwMw ggJsAhEAuS9gzIifoXpGCbhbcGyKrzANBgkqhkiG9w0BAQUFADCBwTELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENl cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAxOTk4IFZlcmlTaWduLCBJ bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5l dHdvcmswHhcNOTgwNTE4MDAwMDAwWhcNMjgwODAxMjM1OTU5WjCBwTELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENl cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAxOTk4IFZlcmlTaWduLCBJ bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5l dHdvcmswgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKeIASF0LOcaA/CY4Zc8DyEI8Zzbl+ma /MIEBhO+X1LIzB4sElYsuAFpLMyZH62wlq55BPITOcF7mLoILOjChBMsqmnpCfTHqQKkQsIjT0rY 8A6i+zFsyeZvmScH9eb0THiebetGhvq5hslU8rLEr9RGHFrJFTD/DWz1LQ5tzn93AgMBAAEwDQYJ KoZIhvcNAQEFBQADgYEAci75f9HxcfvEnvbFXlGKQJi4aPibHIPY4p29/+2h5mbqLwn0ytfqpSuV 9iRghk1ELoOlxC2g0654aW9y2myuCPBjkjfmu8QwF613zEk1qs/Yj9G+txiWR3NqVCI0ZC22FptZ W7RRWTqzCxT0Et9noPStMmResUZyJ4wSe8VEtK4wggMDMIICbAIRALkvYMyIn6F6Rgm4W3Bsiq8w DQYJKoZIhvcNAQEFBQAwgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE8 MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt IEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz ZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMB4XDTk4MDUxODAwMDAwMFoX DTI4MDgwMTIzNTk1OVowgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE8 MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt IEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz ZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMIGfMA0GCSqGSIb3DQEBAQUA A4GNADCBiQKBgQCniAEhdCznGgPwmOGXPA8hCPGc25fpmvzCBAYTvl9SyMweLBJWLLgBaSzMmR+t sJaueQTyEznBe5i6CCzowoQTLKpp6Qn0x6kCpELCI09K2PAOovsxbMnmb5knB/Xm9Ex4nm3rRob6 uYbJVPKyxK/URhxayRUw/w1s9S0Obc5/dwIDAQABMA0GCSqGSIb3DQEBBQUAA4GBAHIu+X/R8XH7 xJ72xV5RikCYuGj4mxyD2OKdvf/toeZm6i8J9MrX6qUrlfYkYIZNRC6DpcQtoNOueGlvctpsrgjw Y5I35rvEMBetd8xJNarP2I/RvrcYlkdzalQiNGQtthabWVu0UVk6swsU9BLfZ6D0rTJkXrFGcieM EnvFRLSuMIIFLDCCBJWgAwIBAgIQOHHBU5PI6PSfHgxNDfRmQzANBgkqhkiG9w0BAQUFADCBwTEL MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1 YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAx OTk4IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZl cmlTaWduIFRydXN0IE5ldHdvcmswHhcNMDMwNTA2MDAwMDAwWhcNMDgwNTA1MjM1OTU5WjCB+TEL MAkGA1UEBhMCVVMxNDAyBgNVBAoTK0ludGVybmF0aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29y cG9yYXRpb24xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1z IG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTAzMTAwLgYDVQQLEydD bGFzcyAyIE9uU2l0ZSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0ExJDAiBgNVBAMTG0lCTSBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA1WetNd2gfv1X YdadpxfLuaONI1yc6Ldn5xdIGH25IOEIsBRR66+ge5u4DkiaskjmT90D5DQv5Y3NHs5mvhNGnDcM 6SxhL/Sj5Fnn6W4nuW1dx1WCwdTqqocOm8XWEB6Cqk3PrvQlVV9SzhOELUBp8wgEfCYluoUbgjLf 04ffugECAwEAAaOCAekwggHlMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgB hvhFAQcXAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMDQGA1Ud HwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTItZzIuY3JsMAsGA1UdDwQE AwIBBjARBglghkgBhvhCAQEEBAMCAQYwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVM YWJlbDItMTI3MB0GA1UdDgQWBBSRwXOwc9XZknRnzRvxURQ0MbYsWjCB6AYDVR0jBIHgMIHdoYHH pIHEMIHBMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xPDA6BgNVBAsTM0Ns YXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMjE6MDgGA1UE CxMxKGMpIDE5OTggVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTEfMB0G A1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29ya4IRALkvYMyIn6F6Rgm4W3Bsiq8wDQYJKoZIhvcN AQEFBQADgYEACBgFEwMbNSXwLj3nIObITvxAdLFCOSkpsnrWLQaRJgZSaRFhzdzMpSWRXex0dZ7b yy7RJE7wcqFfN9R1HYPafpSLE5GZH+2hua7GWR/CodYO81W4kPSIJXV7ZxdP2p/fy8zMyILnmVCa cKhR9ODXfWi8z9XUQjZpPXzUda7+kzwwggUsMIIElaADAgECAhA4ccFTk8jo9J8eDE0N9GZDMA0G CSqGSIb3DQEBBQUAMIHBMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xPDA6 BgNVBAsTM0NsYXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBH MjE6MDgGA1UECxMxKGMpIDE5OTggVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ug b25seTEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazAeFw0wMzA1MDYwMDAwMDBaFw0w ODA1MDUyMzU5NTlaMIH5MQswCQYDVQQGEwJVUzE0MDIGA1UEChMrSW50ZXJuYXRpb25hbCBCdXNp bmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29y azE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEg KGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEk MCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDVZ6013aB+/Vdh1p2nF8u5o40jXJzot2fnF0gYfbkg4QiwFFHrr6B7m7gOSJqySOZP 3QPkNC/ljc0ezma+E0acNwzpLGEv9KPkWefpbie5bV3HVYLB1Oqqhw6bxdYQHoKqTc+u9CVVX1LO E4QtQGnzCAR8JiW6hRuCMt/Th9+6AQIDAQABo4IB6TCCAeUwEgYDVR0TAQH/BAgwBgEB/wIBADBE BgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcCMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlz aWduLmNvbS9ycGEwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNh Mi1nMi5jcmwwCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIBBjApBgNVHREEIjAgpB4wHDEa MBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMjcwHQYDVR0OBBYEFJHBc7Bz1dmSdGfNG/FRFDQxtixa MIHoBgNVHSMEgeAwgd2hgcekgcQwgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwg SW5jLjE8MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhv cml0eSAtIEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3Jp emVkIHVzZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrghEAuS9gzIifoXpG CbhbcGyKrzANBgkqhkiG9w0BAQUFAAOBgQAIGAUTAxs1JfAuPecg5shO/EB0sUI5KSmyetYtBpEm BlJpEWHN3MylJZFd7HR1ntvLLtEkTvByoV831HUdg9p+lIsTkZkf7aG5rsZZH8Kh1g7zVbiQ9Igl dXtnF0/an9/LzMzIgueZUJpwqFH04Nd9aLzP1dRCNmk9fNR1rv6TPDCCBVswggTEoAMCAQICEDpI 7jK8y84yt8lIGSpaaPowDQYJKoZIhvcNAQEEBQAwgfkxCzAJBgNVBAYTAlVTMTQwMgYDVQQKEytJ bnRlcm5hdGlvbmFsIEJ1c2luZXNzIE1hY2hpbmVzIENvcnBvcmF0aW9uMR8wHQYDVQQLExZWZXJp U2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cu dmVyaXNpZ24uY29tL3JwYSAoYykwMzEwMC4GA1UECxMnQ2xhc3MgMiBPblNpdGUgSW5kaXZpZHVh bCBTdWJzY3JpYmVyIENBMSQwIgYDVQQDExtJQk0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDYwNjMwMDAwMDAwWhcNMDcwNjMwMjM1OTU5WjCBhjEuMCwGA1UEChQlSW50ZXJuYXRpb25hbCBC dXNpbmVzcyBNYWNoaW5lcyBDb3JwLjEVMBMGA1UEAwwMUm9sYW5kIFdlYmVyMRkwFwYKCZImiZPy LGQBARQJMTExOTU1NzI0MSIwIAYJKoZIhvcNAQkBFhNyb2x3ZWJlckBkZS5pYm0uY29tMIGfMA0G CSqGSIb3DQEBAQUAA4GNADCBiQKBgQDcs6pxO3WyEHvft+4Tn5IoZY3is9B2wCwCO3TVFDjXgnwG IdJO1qajYQeKjtAoRJgJ5WnNOkXyRAIoao5rzRUQSvz6MtvmAd0yD8PpL1+JK89AbXcxAgy5x6Fa J93JRIbm5i70QVp4szsf66E9CNmXeVzLioPnigVdYC9wDART3QIDAQABo4ICUzCCAk8wCQYDVR0T BAIwADALBgNVHQ8EBAMCBaAwZgYDVR0fBF8wXTBboFmgV4ZVaHR0cDovL29uc2l0ZWNybC52ZXJp c2lnbi5jb20vSW50ZXJuYXRpb25hbEJ1c2luZXNzTWFjaGluZXNDb3JwQ29ycG9yYXRlQ0lPL0xh dGVzdENSTDCCASkGA1UdIASCASAwggEcMIIBGAYLYIZIAYb4RQEHFwIwggEHMCsGCCsGAQUFBwIB Fh9odHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhLWtyMIHXBggrBgEFBQcCAjCByhqBx05vdGlj ZSBUZXh0PU5PVElDRTogUHJpdmF0ZSBrZXkgbWF5IGJlIHJlY292ZXJlZCBieSBWZXJpU2lnbidz IGN1c3RvbWVyIHdobyBtYXkgYmUgYWJsZSB0byBkZWNyeXB0IG1lc3NhZ2VzIHlvdSBzZW5kIHRv IGNlcnRpZmljYXRlIGhvbGRlci4gIFVzZSBpcyBzdWJqZWN0IHRvIHRlcm1zIGF0IGh0dHBzOi8v d3d3LnZlcmlzaWduLmNvbS9ycGEta3IwHwYDVR0jBBgwFoAUkcFzsHPV2ZJ0Z80b8VEUNDG2LFow HQYDVR0OBBYEFHlDENEPMDfpJWg1SI+v/BGE/aGkMC4GA1UdEQQnMCWgIwYKKwYBBAGCNxQCA6AV DBNyb2x3ZWJlckBkZS5pYm0uY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDARBglg hkgBhvhCAQEEBAMCBaAwDQYJKoZIhvcNAQEEBQADgYEAHu2W5olLXaSXEt63N8kfW8RL0HWG8UZk O0V5gg6UYzLXRj4iMhV/EHP5w/2iK9GvvkA57MoDHaXqRWGMGcTV6qKqstQjyxvTnCIlPlGCB5YL lZSCMsA1YrApD7c05dVzm16h+jgwfUgUtaQOlac9LRfxgQalaal2293YJJnC6kwwggVbMIIExKAD AgECAhA6SO4yvMvOMrfJSBkqWmj6MA0GCSqGSIb3DQEBBAUAMIH5MQswCQYDVQQGEwJVUzE0MDIG A1UEChMrSW50ZXJuYXRpb25hbCBCdXNpbmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UE CxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEgKGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIElu ZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEkMCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9y aXR5MB4XDTA2MDYzMDAwMDAwMFoXDTA3MDYzMDIzNTk1OVowgYYxLjAsBgNVBAoUJUludGVybmF0 aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29ycC4xFTATBgNVBAMMDFJvbGFuZCBXZWJlcjEZMBcG CgmSJomT8ixkAQEUCTExMTk1NTcyNDEiMCAGCSqGSIb3DQEJARYTcm9sd2ViZXJAZGUuaWJtLmNv bTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3LOqcTt1shB737fuE5+SKGWN4rPQdsAsAjt0 1RQ414J8BiHSTtamo2EHio7QKESYCeVpzTpF8kQCKGqOa80VEEr8+jLb5gHdMg/D6S9fiSvPQG13 MQIMucehWifdyUSG5uYu9EFaeLM7H+uhPQjZl3lcy4qD54oFXWAvcAwEU90CAwEAAaOCAlMwggJP MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgWgMGYGA1UdHwRfMF0wW6BZoFeGVWh0dHA6Ly9vbnNpdGVj cmwudmVyaXNpZ24uY29tL0ludGVybmF0aW9uYWxCdXNpbmVzc01hY2hpbmVzQ29ycENvcnBvcmF0 ZUNJTy9MYXRlc3RDUkwwggEpBgNVHSAEggEgMIIBHDCCARgGC2CGSAGG+EUBBxcCMIIBBzArBggr BgEFBQcCARYfaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYS1rcjCB1wYIKwYBBQUHAgIwgcoa gcdOb3RpY2UgVGV4dD1OT1RJQ0U6IFByaXZhdGUga2V5IG1heSBiZSByZWNvdmVyZWQgYnkgVmVy aVNpZ24ncyBjdXN0b21lciB3aG8gbWF5IGJlIGFibGUgdG8gZGVjcnlwdCBtZXNzYWdlcyB5b3Ug c2VuZCB0byBjZXJ0aWZpY2F0ZSBob2xkZXIuICBVc2UgaXMgc3ViamVjdCB0byB0ZXJtcyBhdCBo dHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhLWtyMB8GA1UdIwQYMBaAFJHBc7Bz1dmSdGfNG/FR FDQxtixaMB0GA1UdDgQWBBR5QxDRDzA36SVoNUiPr/wRhP2hpDAuBgNVHREEJzAloCMGCisGAQQB gjcUAgOgFQwTcm9sd2ViZXJAZGUuaWJtLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH AwQwEQYJYIZIAYb4QgEBBAQDAgWgMA0GCSqGSIb3DQEBBAUAA4GBAB7tluaJS12klxLetzfJH1vE S9B1hvFGZDtFeYIOlGMy10Y+IjIVfxBz+cP9oivRr75AOezKAx2l6kVhjBnE1eqiqrLUI8sb05wi JT5RggeWC5WUgjLANWKwKQ+3NOXVc5teofo4MH1IFLWkDpWnPS0X8YEGpWmpdtvd2CSZwupMMYIC WzCCAlcCAQEwggEOMIH5MQswCQYDVQQGEwJVUzE0MDIGA1UEChMrSW50ZXJuYXRpb25hbCBCdXNp bmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29y azE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEg KGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEk MCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhA6SO4yvMvOMrfJSBkqWmj6MAkG BSsOAwIaBQCggaIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDcw MzA4MTMxNDA5WjAjBgkqhkiG9w0BCQQxFgQUcf2DAi5VdihmWuGFSKlPE4vZbH8wQwYJKoZIhvcN AQkPMTYwNDAHBgUrDgMCHTAOBggqhkiG9w0DAgICAIAwCgYIKoZIhvcNAwcwDQYIKoZIhvcNAwIC ASgwDQYJKoZIhvcNAQEBBQAEgYC4RRP4i7mijlLEj2cGdwpTER1Pmj+ixgHyk/W3SuYRAefxiwSy ujKuKGxr4GS9LYp5nALKJ96vj7bIEZaVyOImM/oavt94szV78sRot3x6fhy4zZszCKBiaXxbFgqU eokC3B81SJ9C5SzXLAbhj4Lgbn3pefUs/CLN84lIapettwAAAAA= ---------z48733_boundary_sign-- From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 13:16:20 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 65752 invoked from network); 8 Mar 2007 13:16:19 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 13:16:19 -0000 Received: (qmail 336 invoked by uid 500); 8 Mar 2007 13:16:27 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 325 invoked by uid 500); 8 Mar 2007 13:16:27 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 314 invoked by uid 99); 8 Mar 2007 13:16:27 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:16:27 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of samanthafuller@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO mtagate6.de.ibm.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:16:16 -0800 Received: from d12nrmr1607.megacenter.de.ibm.com (d12nrmr1607.megacenter.de.ibm.com [83.161.120.155]) by mtagate6.de.ibm.com (8.13.8/8.13.8) with ESMTP id l28DFtJl325682 for <samanthafuller@example.net>; Thu, 8 Mar 2007 13:15:55 GMT Received: from d12av04.megacenter.de.ibm.com (d12av04.megacenter.de.ibm.com [83.161.120.155]) by d12nrmr1607.megacenter.de.ibm.com (8.13.8/8.13.8/NCO v8.3) with ESMTP id l28DFtKb1872098 for <samanthafuller@example.net>; Thu, 8 Mar 2007 14:15:55 +0100 Received: from d12av04.megacenter.de.ibm.com (loopback [83.161.120.155]) by d12av04.megacenter.de.ibm.com (83.161.120.15560308/8.13.3) with ESMTP id l28DFtFA031884 for <samanthafuller@example.net>; Thu, 8 Mar 2007 14:15:55 +0100 Received: from d12ml067.megacenter.de.ibm.com (d12ml067.megacenter.de.ibm.com [83.161.120.155]) by d12av04.megacenter.de.ibm.com (83.161.120.15560308/8.12.11) with ESMTP id l28DFtc0031881 for <samanthafuller@example.net>; Thu, 8 Mar 2007 14:15:55 +0100 In-Reply-To: <samanthafuller@example.net> To: "HttpClient User Discussion" <samanthafuller@example.net> Subject: Re: Certificate Based Client Authentication MIME-Version: 1.0 X-Mailer: Lotus Notes Release 7.0 HF144 February 01, 2006 From: Roland Weber <samanthafuller@example.net> X-MIMETrack: S/MIME Sign by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:15:46, Serialize by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:15:46, Serialize samanthafuller@example.net 14:15:46, Itemize by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:15:46, S/MIME Sign samanthafuller@example.net 14:15:46, S/MIME Sign by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:15:52, S/MIME Sign samanthafuller@example.net 14:15:52, Serialize by Router on D12ML067/12/M/IBM(Release 7.0.2HF71 | November 3, 2006) at 08/03/2007 14:15:54, Serialize complete at 08/03/2007 14:15:54 Message-ID: <samanthafuller@example.net> Date: Thu, 8 Mar 2007 14:15:53 +0100 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary=-------z17504_boundary_sign X-Virus-Checked: Checked by ClamAV on apache.org ---------z17504_boundary_sign Content-Type: text/plain; charset="US-ASCII" Hello Lalit, the answer you are looking for is in the mailing list archives. best regards, Roland ---------z17504_boundary_sign Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIIdrAIBATELMAkGBSsOAwIaBQAwCwYJKoZIhvcNAQcBoIIbLDCCAwMw ggJsAhEAuS9gzIifoXpGCbhbcGyKrzANBgkqhkiG9w0BAQUFADCBwTELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENl cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAxOTk4IFZlcmlTaWduLCBJ bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5l dHdvcmswHhcNOTgwNTE4MDAwMDAwWhcNMjgwODAxMjM1OTU5WjCBwTELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENl cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAxOTk4IFZlcmlTaWduLCBJ bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5l dHdvcmswgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKeIASF0LOcaA/CY4Zc8DyEI8Zzbl+ma /MIEBhO+X1LIzB4sElYsuAFpLMyZH62wlq55BPITOcF7mLoILOjChBMsqmnpCfTHqQKkQsIjT0rY 8A6i+zFsyeZvmScH9eb0THiebetGhvq5hslU8rLEr9RGHFrJFTD/DWz1LQ5tzn93AgMBAAEwDQYJ KoZIhvcNAQEFBQADgYEAci75f9HxcfvEnvbFXlGKQJi4aPibHIPY4p29/+2h5mbqLwn0ytfqpSuV 9iRghk1ELoOlxC2g0654aW9y2myuCPBjkjfmu8QwF613zEk1qs/Yj9G+txiWR3NqVCI0ZC22FptZ W7RRWTqzCxT0Et9noPStMmResUZyJ4wSe8VEtK4wggMDMIICbAIRALkvYMyIn6F6Rgm4W3Bsiq8w DQYJKoZIhvcNAQEFBQAwgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE8 MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt IEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz ZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMB4XDTk4MDUxODAwMDAwMFoX DTI4MDgwMTIzNTk1OVowgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE8 MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt IEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz ZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMIGfMA0GCSqGSIb3DQEBAQUA A4GNADCBiQKBgQCniAEhdCznGgPwmOGXPA8hCPGc25fpmvzCBAYTvl9SyMweLBJWLLgBaSzMmR+t sJaueQTyEznBe5i6CCzowoQTLKpp6Qn0x6kCpELCI09K2PAOovsxbMnmb5knB/Xm9Ex4nm3rRob6 uYbJVPKyxK/URhxayRUw/w1s9S0Obc5/dwIDAQABMA0GCSqGSIb3DQEBBQUAA4GBAHIu+X/R8XH7 xJ72xV5RikCYuGj4mxyD2OKdvf/toeZm6i8J9MrX6qUrlfYkYIZNRC6DpcQtoNOueGlvctpsrgjw Y5I35rvEMBetd8xJNarP2I/RvrcYlkdzalQiNGQtthabWVu0UVk6swsU9BLfZ6D0rTJkXrFGcieM EnvFRLSuMIIFLDCCBJWgAwIBAgIQOHHBU5PI6PSfHgxNDfRmQzANBgkqhkiG9w0BAQUFADCBwTEL MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1 YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAx OTk4IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZl cmlTaWduIFRydXN0IE5ldHdvcmswHhcNMDMwNTA2MDAwMDAwWhcNMDgwNTA1MjM1OTU5WjCB+TEL MAkGA1UEBhMCVVMxNDAyBgNVBAoTK0ludGVybmF0aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29y cG9yYXRpb24xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1z IG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTAzMTAwLgYDVQQLEydD bGFzcyAyIE9uU2l0ZSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0ExJDAiBgNVBAMTG0lCTSBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA1WetNd2gfv1X YdadpxfLuaONI1yc6Ldn5xdIGH25IOEIsBRR66+ge5u4DkiaskjmT90D5DQv5Y3NHs5mvhNGnDcM 6SxhL/Sj5Fnn6W4nuW1dx1WCwdTqqocOm8XWEB6Cqk3PrvQlVV9SzhOELUBp8wgEfCYluoUbgjLf 04ffugECAwEAAaOCAekwggHlMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgB hvhFAQcXAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMDQGA1Ud HwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTItZzIuY3JsMAsGA1UdDwQE AwIBBjARBglghkgBhvhCAQEEBAMCAQYwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVM YWJlbDItMTI3MB0GA1UdDgQWBBSRwXOwc9XZknRnzRvxURQ0MbYsWjCB6AYDVR0jBIHgMIHdoYHH pIHEMIHBMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xPDA6BgNVBAsTM0Ns YXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMjE6MDgGA1UE CxMxKGMpIDE5OTggVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTEfMB0G A1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29ya4IRALkvYMyIn6F6Rgm4W3Bsiq8wDQYJKoZIhvcN AQEFBQADgYEACBgFEwMbNSXwLj3nIObITvxAdLFCOSkpsnrWLQaRJgZSaRFhzdzMpSWRXex0dZ7b yy7RJE7wcqFfN9R1HYPafpSLE5GZH+2hua7GWR/CodYO81W4kPSIJXV7ZxdP2p/fy8zMyILnmVCa cKhR9ODXfWi8z9XUQjZpPXzUda7+kzwwggUsMIIElaADAgECAhA4ccFTk8jo9J8eDE0N9GZDMA0G CSqGSIb3DQEBBQUAMIHBMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xPDA6 BgNVBAsTM0NsYXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBH MjE6MDgGA1UECxMxKGMpIDE5OTggVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ug b25seTEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazAeFw0wMzA1MDYwMDAwMDBaFw0w ODA1MDUyMzU5NTlaMIH5MQswCQYDVQQGEwJVUzE0MDIGA1UEChMrSW50ZXJuYXRpb25hbCBCdXNp bmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29y azE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEg KGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEk MCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDVZ6013aB+/Vdh1p2nF8u5o40jXJzot2fnF0gYfbkg4QiwFFHrr6B7m7gOSJqySOZP 3QPkNC/ljc0ezma+E0acNwzpLGEv9KPkWefpbie5bV3HVYLB1Oqqhw6bxdYQHoKqTc+u9CVVX1LO E4QtQGnzCAR8JiW6hRuCMt/Th9+6AQIDAQABo4IB6TCCAeUwEgYDVR0TAQH/BAgwBgEB/wIBADBE BgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcCMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlz aWduLmNvbS9ycGEwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNh Mi1nMi5jcmwwCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIBBjApBgNVHREEIjAgpB4wHDEa MBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMjcwHQYDVR0OBBYEFJHBc7Bz1dmSdGfNG/FRFDQxtixa MIHoBgNVHSMEgeAwgd2hgcekgcQwgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwg SW5jLjE8MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhv cml0eSAtIEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3Jp emVkIHVzZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrghEAuS9gzIifoXpG CbhbcGyKrzANBgkqhkiG9w0BAQUFAAOBgQAIGAUTAxs1JfAuPecg5shO/EB0sUI5KSmyetYtBpEm BlJpEWHN3MylJZFd7HR1ntvLLtEkTvByoV831HUdg9p+lIsTkZkf7aG5rsZZH8Kh1g7zVbiQ9Igl dXtnF0/an9/LzMzIgueZUJpwqFH04Nd9aLzP1dRCNmk9fNR1rv6TPDCCBVswggTEoAMCAQICEDpI 7jK8y84yt8lIGSpaaPowDQYJKoZIhvcNAQEEBQAwgfkxCzAJBgNVBAYTAlVTMTQwMgYDVQQKEytJ bnRlcm5hdGlvbmFsIEJ1c2luZXNzIE1hY2hpbmVzIENvcnBvcmF0aW9uMR8wHQYDVQQLExZWZXJp U2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cu dmVyaXNpZ24uY29tL3JwYSAoYykwMzEwMC4GA1UECxMnQ2xhc3MgMiBPblNpdGUgSW5kaXZpZHVh bCBTdWJzY3JpYmVyIENBMSQwIgYDVQQDExtJQk0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDYwNjMwMDAwMDAwWhcNMDcwNjMwMjM1OTU5WjCBhjEuMCwGA1UEChQlSW50ZXJuYXRpb25hbCBC dXNpbmVzcyBNYWNoaW5lcyBDb3JwLjEVMBMGA1UEAwwMUm9sYW5kIFdlYmVyMRkwFwYKCZImiZPy LGQBARQJMTExOTU1NzI0MSIwIAYJKoZIhvcNAQkBFhNyb2x3ZWJlckBkZS5pYm0uY29tMIGfMA0G CSqGSIb3DQEBAQUAA4GNADCBiQKBgQDcs6pxO3WyEHvft+4Tn5IoZY3is9B2wCwCO3TVFDjXgnwG IdJO1qajYQeKjtAoRJgJ5WnNOkXyRAIoao5rzRUQSvz6MtvmAd0yD8PpL1+JK89AbXcxAgy5x6Fa J93JRIbm5i70QVp4szsf66E9CNmXeVzLioPnigVdYC9wDART3QIDAQABo4ICUzCCAk8wCQYDVR0T BAIwADALBgNVHQ8EBAMCBaAwZgYDVR0fBF8wXTBboFmgV4ZVaHR0cDovL29uc2l0ZWNybC52ZXJp c2lnbi5jb20vSW50ZXJuYXRpb25hbEJ1c2luZXNzTWFjaGluZXNDb3JwQ29ycG9yYXRlQ0lPL0xh dGVzdENSTDCCASkGA1UdIASCASAwggEcMIIBGAYLYIZIAYb4RQEHFwIwggEHMCsGCCsGAQUFBwIB Fh9odHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhLWtyMIHXBggrBgEFBQcCAjCByhqBx05vdGlj ZSBUZXh0PU5PVElDRTogUHJpdmF0ZSBrZXkgbWF5IGJlIHJlY292ZXJlZCBieSBWZXJpU2lnbidz IGN1c3RvbWVyIHdobyBtYXkgYmUgYWJsZSB0byBkZWNyeXB0IG1lc3NhZ2VzIHlvdSBzZW5kIHRv IGNlcnRpZmljYXRlIGhvbGRlci4gIFVzZSBpcyBzdWJqZWN0IHRvIHRlcm1zIGF0IGh0dHBzOi8v d3d3LnZlcmlzaWduLmNvbS9ycGEta3IwHwYDVR0jBBgwFoAUkcFzsHPV2ZJ0Z80b8VEUNDG2LFow HQYDVR0OBBYEFHlDENEPMDfpJWg1SI+v/BGE/aGkMC4GA1UdEQQnMCWgIwYKKwYBBAGCNxQCA6AV DBNyb2x3ZWJlckBkZS5pYm0uY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDARBglg hkgBhvhCAQEEBAMCBaAwDQYJKoZIhvcNAQEEBQADgYEAHu2W5olLXaSXEt63N8kfW8RL0HWG8UZk O0V5gg6UYzLXRj4iMhV/EHP5w/2iK9GvvkA57MoDHaXqRWGMGcTV6qKqstQjyxvTnCIlPlGCB5YL lZSCMsA1YrApD7c05dVzm16h+jgwfUgUtaQOlac9LRfxgQalaal2293YJJnC6kwwggVbMIIExKAD AgECAhA6SO4yvMvOMrfJSBkqWmj6MA0GCSqGSIb3DQEBBAUAMIH5MQswCQYDVQQGEwJVUzE0MDIG A1UEChMrSW50ZXJuYXRpb25hbCBCdXNpbmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UE CxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEgKGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIElu ZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEkMCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9y aXR5MB4XDTA2MDYzMDAwMDAwMFoXDTA3MDYzMDIzNTk1OVowgYYxLjAsBgNVBAoUJUludGVybmF0 aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29ycC4xFTATBgNVBAMMDFJvbGFuZCBXZWJlcjEZMBcG CgmSJomT8ixkAQEUCTExMTk1NTcyNDEiMCAGCSqGSIb3DQEJARYTcm9sd2ViZXJAZGUuaWJtLmNv bTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3LOqcTt1shB737fuE5+SKGWN4rPQdsAsAjt0 1RQ414J8BiHSTtamo2EHio7QKESYCeVpzTpF8kQCKGqOa80VEEr8+jLb5gHdMg/D6S9fiSvPQG13 MQIMucehWifdyUSG5uYu9EFaeLM7H+uhPQjZl3lcy4qD54oFXWAvcAwEU90CAwEAAaOCAlMwggJP MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgWgMGYGA1UdHwRfMF0wW6BZoFeGVWh0dHA6Ly9vbnNpdGVj cmwudmVyaXNpZ24uY29tL0ludGVybmF0aW9uYWxCdXNpbmVzc01hY2hpbmVzQ29ycENvcnBvcmF0 ZUNJTy9MYXRlc3RDUkwwggEpBgNVHSAEggEgMIIBHDCCARgGC2CGSAGG+EUBBxcCMIIBBzArBggr BgEFBQcCARYfaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYS1rcjCB1wYIKwYBBQUHAgIwgcoa gcdOb3RpY2UgVGV4dD1OT1RJQ0U6IFByaXZhdGUga2V5IG1heSBiZSByZWNvdmVyZWQgYnkgVmVy aVNpZ24ncyBjdXN0b21lciB3aG8gbWF5IGJlIGFibGUgdG8gZGVjcnlwdCBtZXNzYWdlcyB5b3Ug c2VuZCB0byBjZXJ0aWZpY2F0ZSBob2xkZXIuICBVc2UgaXMgc3ViamVjdCB0byB0ZXJtcyBhdCBo dHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhLWtyMB8GA1UdIwQYMBaAFJHBc7Bz1dmSdGfNG/FR FDQxtixaMB0GA1UdDgQWBBR5QxDRDzA36SVoNUiPr/wRhP2hpDAuBgNVHREEJzAloCMGCisGAQQB gjcUAgOgFQwTcm9sd2ViZXJAZGUuaWJtLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH AwQwEQYJYIZIAYb4QgEBBAQDAgWgMA0GCSqGSIb3DQEBBAUAA4GBAB7tluaJS12klxLetzfJH1vE S9B1hvFGZDtFeYIOlGMy10Y+IjIVfxBz+cP9oivRr75AOezKAx2l6kVhjBnE1eqiqrLUI8sb05wi JT5RggeWC5WUgjLANWKwKQ+3NOXVc5teofo4MH1IFLWkDpWnPS0X8YEGpWmpdtvd2CSZwupMMYIC WzCCAlcCAQEwggEOMIH5MQswCQYDVQQGEwJVUzE0MDIGA1UEChMrSW50ZXJuYXRpb25hbCBCdXNp bmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29y azE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEg KGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEk MCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhA6SO4yvMvOMrfJSBkqWmj6MAkG BSsOAwIaBQCggaIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDcw MzA4MTMxNTQ2WjAjBgkqhkiG9w0BCQQxFgQUauoPbIonqYC5Cgg0AhAhgH47yvowQwYJKoZIhvcN AQkPMTYwNDAHBgUrDgMCHTAOBggqhkiG9w0DAgICAIAwCgYIKoZIhvcNAwcwDQYIKoZIhvcNAwIC ASgwDQYJKoZIhvcNAQEBBQAEgYAruMgPpsAq2NHWtpVNmLy23DIOgZcws2+A/lPMabNBOOeTIyGK 1OhFh3P29QwuWjDD61+kzwLVmzF3eok6ya5oU20tuGcB2+6TKgXvOpJV3pOZFkmQymPoHPZKYMSv 8GPvsVX7Wtzr2vqzBMRD5j58Dx3zyJCu6rgIAV7OnpLd9gAAAAA= ---------z17504_boundary_sign-- From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 13:19:40 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 67136 invoked from network); 8 Mar 2007 13:19:40 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 13:19:40 -0000 Received: (qmail 8856 invoked by uid 500); 8 Mar 2007 13:19:47 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 8844 invoked by uid 500); 8 Mar 2007 13:19:47 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 8833 invoked by uid 99); 8 Mar 2007 13:19:47 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:19:47 -0800 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: local policy) Received: from [83.161.120.155] (HELO southendmsg.SONATA.LOCAL) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:19:38 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: Certificate Based Client Authentication Date: Thu, 8 Mar 2007 18:50:12 +0530 Message-ID: <samanthafuller@example.net> In-Reply-To: <samanthafuller@example.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Certificate Based Client Authentication Thread-Index: AcdhhCM0J+CCLRGxRYyEzIGprmEQvwAABq0g References: <samanthafuller@example.net> <samanthafuller@example.net> From: "Lalit Sahoo" <samanthafuller@example.net> To: "HttpClient User Discussion" <samanthafuller@example.net> X-Virus-Checked: Checked by ClamAV on apache.org Hi Roland, Thanks! for the response. I have gone through the mailing list, but I didn't get any concrete one. Could you please give URL for these? Regards, Lalit -----Original Message----- From: Roland Weber [mailto:samanthafuller@example.net]=20 Sent: Thursday, March 08, 2007 6:46 PM To: HttpClient User Discussion Subject: Re: Certificate Based Client Authentication Hello Lalit, the answer you are looking for is in the mailing list archives. best regards, Roland --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 13:29:25 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 72438 invoked from network); 8 Mar 2007 13:29:25 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 13:29:25 -0000 Received: (qmail 19320 invoked by uid 500); 8 Mar 2007 13:29:33 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 19312 invoked by uid 500); 8 Mar 2007 13:29:33 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 19300 invoked by uid 99); 8 Mar 2007 13:29:33 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:29:33 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of samanthafuller@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO mtagate5.uk.ibm.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 05:29:23 -0800 Received: from d12nrmr1607.megacenter.de.ibm.com (d12nrmr1607.megacenter.de.ibm.com [83.161.120.155]) by mtagate5.uk.ibm.com (8.13.8/8.13.8) with ESMTP id l28DT1ll089732 for <samanthafuller@example.net>; Thu, 8 Mar 2007 13:29:01 GMT Received: from d12av02.megacenter.de.ibm.com (d12av02.megacenter.de.ibm.com [83.161.120.155]) by d12nrmr1607.megacenter.de.ibm.com (8.13.8/8.13.8/NCO v8.3) with ESMTP id l28DT1BK2244610 for <samanthafuller@example.net>; Thu, 8 Mar 2007 14:29:01 +0100 Received: from d12av02.megacenter.de.ibm.com (loopback [83.161.120.155]) by d12av02.megacenter.de.ibm.com (83.161.120.15560308/8.13.3) with ESMTP id l28DT0xr015599 for <samanthafuller@example.net>; Thu, 8 Mar 2007 14:29:00 +0100 Received: from d12ml067.megacenter.de.ibm.com (d12ml067.megacenter.de.ibm.com [83.161.120.155]) by d12av02.megacenter.de.ibm.com (83.161.120.15560308/8.12.11) with ESMTP id l28DT01L015583 for <samanthafuller@example.net>; Thu, 8 Mar 2007 14:29:00 +0100 In-Reply-To: <samanthafuller@example.net> To: "HttpClient User Discussion" <samanthafuller@example.net> Subject: RE: Certificate Based Client Authentication MIME-Version: 1.0 X-Mailer: Lotus Notes Release 7.0 HF144 February 01, 2006 From: Roland Weber <samanthafuller@example.net> X-MIMETrack: S/MIME Sign by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:28:51, Serialize by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:28:51, Serialize samanthafuller@example.net 14:28:51, Itemize by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:28:52, S/MIME Sign samanthafuller@example.net 14:28:52, S/MIME Sign by Notes Client on Roland Weber/Germany/IBM(Release 7.0 HF144|February 01, 2006) at 08.03.2007 14:28:57, S/MIME Sign samanthafuller@example.net 14:28:57, Serialize by Router on D12ML067/12/M/IBM(Release 7.0.2HF71 | November 3, 2006) at 08/03/2007 14:29:00, Serialize complete at 08/03/2007 14:29:00 Message-ID: <samanthafuller@example.net> Date: Thu, 8 Mar 2007 14:28:58 +0100 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary=-------z40881_boundary_sign X-Virus-Checked: Checked by ClamAV on apache.org ---------z40881_boundary_sign Content-Type: text/plain; charset="US-ASCII" Hello Lalit, Julius Davis has written some detailed mails about SSL in the last months. You may have to search the developer list as well as the user list. best regards, Roland ---------z40881_boundary_sign Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIIdrAIBATELMAkGBSsOAwIaBQAwCwYJKoZIhvcNAQcBoIIbLDCCAwMw ggJsAhEAuS9gzIifoXpGCbhbcGyKrzANBgkqhkiG9w0BAQUFADCBwTELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENl cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAxOTk4IFZlcmlTaWduLCBJ bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5l dHdvcmswHhcNOTgwNTE4MDAwMDAwWhcNMjgwODAxMjM1OTU5WjCBwTELMAkGA1UEBhMCVVMxFzAV BgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1YmxpYyBQcmltYXJ5IENl cnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAxOTk4IFZlcmlTaWduLCBJ bmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5l dHdvcmswgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKeIASF0LOcaA/CY4Zc8DyEI8Zzbl+ma /MIEBhO+X1LIzB4sElYsuAFpLMyZH62wlq55BPITOcF7mLoILOjChBMsqmnpCfTHqQKkQsIjT0rY 8A6i+zFsyeZvmScH9eb0THiebetGhvq5hslU8rLEr9RGHFrJFTD/DWz1LQ5tzn93AgMBAAEwDQYJ KoZIhvcNAQEFBQADgYEAci75f9HxcfvEnvbFXlGKQJi4aPibHIPY4p29/+2h5mbqLwn0ytfqpSuV 9iRghk1ELoOlxC2g0654aW9y2myuCPBjkjfmu8QwF613zEk1qs/Yj9G+txiWR3NqVCI0ZC22FptZ W7RRWTqzCxT0Et9noPStMmResUZyJ4wSe8VEtK4wggMDMIICbAIRALkvYMyIn6F6Rgm4W3Bsiq8w DQYJKoZIhvcNAQEFBQAwgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE8 MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt IEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz ZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMB4XDTk4MDUxODAwMDAwMFoX DTI4MDgwMTIzNTk1OVowgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwgSW5jLjE8 MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAt IEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3JpemVkIHVz ZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMIGfMA0GCSqGSIb3DQEBAQUA A4GNADCBiQKBgQCniAEhdCznGgPwmOGXPA8hCPGc25fpmvzCBAYTvl9SyMweLBJWLLgBaSzMmR+t sJaueQTyEznBe5i6CCzowoQTLKpp6Qn0x6kCpELCI09K2PAOovsxbMnmb5knB/Xm9Ex4nm3rRob6 uYbJVPKyxK/URhxayRUw/w1s9S0Obc5/dwIDAQABMA0GCSqGSIb3DQEBBQUAA4GBAHIu+X/R8XH7 xJ72xV5RikCYuGj4mxyD2OKdvf/toeZm6i8J9MrX6qUrlfYkYIZNRC6DpcQtoNOueGlvctpsrgjw Y5I35rvEMBetd8xJNarP2I/RvrcYlkdzalQiNGQtthabWVu0UVk6swsU9BLfZ6D0rTJkXrFGcieM EnvFRLSuMIIFLDCCBJWgAwIBAgIQOHHBU5PI6PSfHgxNDfRmQzANBgkqhkiG9w0BAQUFADCBwTEL MAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMTwwOgYDVQQLEzNDbGFzcyAyIFB1 YmxpYyBQcmltYXJ5IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gRzIxOjA4BgNVBAsTMShjKSAx OTk4IFZlcmlTaWduLCBJbmMuIC0gRm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxHzAdBgNVBAsTFlZl cmlTaWduIFRydXN0IE5ldHdvcmswHhcNMDMwNTA2MDAwMDAwWhcNMDgwNTA1MjM1OTU5WjCB+TEL MAkGA1UEBhMCVVMxNDAyBgNVBAoTK0ludGVybmF0aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29y cG9yYXRpb24xHzAdBgNVBAsTFlZlcmlTaWduIFRydXN0IE5ldHdvcmsxOzA5BgNVBAsTMlRlcm1z IG9mIHVzZSBhdCBodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhIChjKTAzMTAwLgYDVQQLEydD bGFzcyAyIE9uU2l0ZSBJbmRpdmlkdWFsIFN1YnNjcmliZXIgQ0ExJDAiBgNVBAMTG0lCTSBDZXJ0 aWZpY2F0aW9uIEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA1WetNd2gfv1X YdadpxfLuaONI1yc6Ldn5xdIGH25IOEIsBRR66+ge5u4DkiaskjmT90D5DQv5Y3NHs5mvhNGnDcM 6SxhL/Sj5Fnn6W4nuW1dx1WCwdTqqocOm8XWEB6Cqk3PrvQlVV9SzhOELUBp8wgEfCYluoUbgjLf 04ffugECAwEAAaOCAekwggHlMBIGA1UdEwEB/wQIMAYBAf8CAQAwRAYDVR0gBD0wOzA5BgtghkgB hvhFAQcXAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMDQGA1Ud HwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwudmVyaXNpZ24uY29tL3BjYTItZzIuY3JsMAsGA1UdDwQE AwIBBjARBglghkgBhvhCAQEEBAMCAQYwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVM YWJlbDItMTI3MB0GA1UdDgQWBBSRwXOwc9XZknRnzRvxURQ0MbYsWjCB6AYDVR0jBIHgMIHdoYHH pIHEMIHBMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xPDA6BgNVBAsTM0Ns YXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBHMjE6MDgGA1UE CxMxKGMpIDE5OTggVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ugb25seTEfMB0G A1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29ya4IRALkvYMyIn6F6Rgm4W3Bsiq8wDQYJKoZIhvcN AQEFBQADgYEACBgFEwMbNSXwLj3nIObITvxAdLFCOSkpsnrWLQaRJgZSaRFhzdzMpSWRXex0dZ7b yy7RJE7wcqFfN9R1HYPafpSLE5GZH+2hua7GWR/CodYO81W4kPSIJXV7ZxdP2p/fy8zMyILnmVCa cKhR9ODXfWi8z9XUQjZpPXzUda7+kzwwggUsMIIElaADAgECAhA4ccFTk8jo9J8eDE0N9GZDMA0G CSqGSIb3DQEBBQUAMIHBMQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xPDA6 BgNVBAsTM0NsYXNzIDIgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBH MjE6MDgGA1UECxMxKGMpIDE5OTggVmVyaVNpZ24sIEluYy4gLSBGb3IgYXV0aG9yaXplZCB1c2Ug b25seTEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazAeFw0wMzA1MDYwMDAwMDBaFw0w ODA1MDUyMzU5NTlaMIH5MQswCQYDVQQGEwJVUzE0MDIGA1UEChMrSW50ZXJuYXRpb25hbCBCdXNp bmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29y azE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEg KGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEk MCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIGfMA0GCSqGSIb3DQEBAQUAA4GN ADCBiQKBgQDVZ6013aB+/Vdh1p2nF8u5o40jXJzot2fnF0gYfbkg4QiwFFHrr6B7m7gOSJqySOZP 3QPkNC/ljc0ezma+E0acNwzpLGEv9KPkWefpbie5bV3HVYLB1Oqqhw6bxdYQHoKqTc+u9CVVX1LO E4QtQGnzCAR8JiW6hRuCMt/Th9+6AQIDAQABo4IB6TCCAeUwEgYDVR0TAQH/BAgwBgEB/wIBADBE BgNVHSAEPTA7MDkGC2CGSAGG+EUBBxcCMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlz aWduLmNvbS9ycGEwNAYDVR0fBC0wKzApoCegJYYjaHR0cDovL2NybC52ZXJpc2lnbi5jb20vcGNh Mi1nMi5jcmwwCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIBBjApBgNVHREEIjAgpB4wHDEa MBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMjcwHQYDVR0OBBYEFJHBc7Bz1dmSdGfNG/FRFDQxtixa MIHoBgNVHSMEgeAwgd2hgcekgcQwgcExCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5WZXJpU2lnbiwg SW5jLjE8MDoGA1UECxMzQ2xhc3MgMiBQdWJsaWMgUHJpbWFyeSBDZXJ0aWZpY2F0aW9uIEF1dGhv cml0eSAtIEcyMTowOAYDVQQLEzEoYykgMTk5OCBWZXJpU2lnbiwgSW5jLiAtIEZvciBhdXRob3Jp emVkIHVzZSBvbmx5MR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrghEAuS9gzIifoXpG CbhbcGyKrzANBgkqhkiG9w0BAQUFAAOBgQAIGAUTAxs1JfAuPecg5shO/EB0sUI5KSmyetYtBpEm BlJpEWHN3MylJZFd7HR1ntvLLtEkTvByoV831HUdg9p+lIsTkZkf7aG5rsZZH8Kh1g7zVbiQ9Igl dXtnF0/an9/LzMzIgueZUJpwqFH04Nd9aLzP1dRCNmk9fNR1rv6TPDCCBVswggTEoAMCAQICEDpI 7jK8y84yt8lIGSpaaPowDQYJKoZIhvcNAQEEBQAwgfkxCzAJBgNVBAYTAlVTMTQwMgYDVQQKEytJ bnRlcm5hdGlvbmFsIEJ1c2luZXNzIE1hY2hpbmVzIENvcnBvcmF0aW9uMR8wHQYDVQQLExZWZXJp U2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cu dmVyaXNpZ24uY29tL3JwYSAoYykwMzEwMC4GA1UECxMnQ2xhc3MgMiBPblNpdGUgSW5kaXZpZHVh bCBTdWJzY3JpYmVyIENBMSQwIgYDVQQDExtJQk0gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcN MDYwNjMwMDAwMDAwWhcNMDcwNjMwMjM1OTU5WjCBhjEuMCwGA1UEChQlSW50ZXJuYXRpb25hbCBC dXNpbmVzcyBNYWNoaW5lcyBDb3JwLjEVMBMGA1UEAwwMUm9sYW5kIFdlYmVyMRkwFwYKCZImiZPy LGQBARQJMTExOTU1NzI0MSIwIAYJKoZIhvcNAQkBFhNyb2x3ZWJlckBkZS5pYm0uY29tMIGfMA0G CSqGSIb3DQEBAQUAA4GNADCBiQKBgQDcs6pxO3WyEHvft+4Tn5IoZY3is9B2wCwCO3TVFDjXgnwG IdJO1qajYQeKjtAoRJgJ5WnNOkXyRAIoao5rzRUQSvz6MtvmAd0yD8PpL1+JK89AbXcxAgy5x6Fa J93JRIbm5i70QVp4szsf66E9CNmXeVzLioPnigVdYC9wDART3QIDAQABo4ICUzCCAk8wCQYDVR0T BAIwADALBgNVHQ8EBAMCBaAwZgYDVR0fBF8wXTBboFmgV4ZVaHR0cDovL29uc2l0ZWNybC52ZXJp c2lnbi5jb20vSW50ZXJuYXRpb25hbEJ1c2luZXNzTWFjaGluZXNDb3JwQ29ycG9yYXRlQ0lPL0xh dGVzdENSTDCCASkGA1UdIASCASAwggEcMIIBGAYLYIZIAYb4RQEHFwIwggEHMCsGCCsGAQUFBwIB Fh9odHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhLWtyMIHXBggrBgEFBQcCAjCByhqBx05vdGlj ZSBUZXh0PU5PVElDRTogUHJpdmF0ZSBrZXkgbWF5IGJlIHJlY292ZXJlZCBieSBWZXJpU2lnbidz IGN1c3RvbWVyIHdobyBtYXkgYmUgYWJsZSB0byBkZWNyeXB0IG1lc3NhZ2VzIHlvdSBzZW5kIHRv IGNlcnRpZmljYXRlIGhvbGRlci4gIFVzZSBpcyBzdWJqZWN0IHRvIHRlcm1zIGF0IGh0dHBzOi8v d3d3LnZlcmlzaWduLmNvbS9ycGEta3IwHwYDVR0jBBgwFoAUkcFzsHPV2ZJ0Z80b8VEUNDG2LFow HQYDVR0OBBYEFHlDENEPMDfpJWg1SI+v/BGE/aGkMC4GA1UdEQQnMCWgIwYKKwYBBAGCNxQCA6AV DBNyb2x3ZWJlckBkZS5pYm0uY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDARBglg hkgBhvhCAQEEBAMCBaAwDQYJKoZIhvcNAQEEBQADgYEAHu2W5olLXaSXEt63N8kfW8RL0HWG8UZk O0V5gg6UYzLXRj4iMhV/EHP5w/2iK9GvvkA57MoDHaXqRWGMGcTV6qKqstQjyxvTnCIlPlGCB5YL lZSCMsA1YrApD7c05dVzm16h+jgwfUgUtaQOlac9LRfxgQalaal2293YJJnC6kwwggVbMIIExKAD AgECAhA6SO4yvMvOMrfJSBkqWmj6MA0GCSqGSIb3DQEBBAUAMIH5MQswCQYDVQQGEwJVUzE0MDIG A1UEChMrSW50ZXJuYXRpb25hbCBCdXNpbmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UE CxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBz Oi8vd3d3LnZlcmlzaWduLmNvbS9ycGEgKGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIElu ZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEkMCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9y aXR5MB4XDTA2MDYzMDAwMDAwMFoXDTA3MDYzMDIzNTk1OVowgYYxLjAsBgNVBAoUJUludGVybmF0 aW9uYWwgQnVzaW5lc3MgTWFjaGluZXMgQ29ycC4xFTATBgNVBAMMDFJvbGFuZCBXZWJlcjEZMBcG CgmSJomT8ixkAQEUCTExMTk1NTcyNDEiMCAGCSqGSIb3DQEJARYTcm9sd2ViZXJAZGUuaWJtLmNv bTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3LOqcTt1shB737fuE5+SKGWN4rPQdsAsAjt0 1RQ414J8BiHSTtamo2EHio7QKESYCeVpzTpF8kQCKGqOa80VEEr8+jLb5gHdMg/D6S9fiSvPQG13 MQIMucehWifdyUSG5uYu9EFaeLM7H+uhPQjZl3lcy4qD54oFXWAvcAwEU90CAwEAAaOCAlMwggJP MAkGA1UdEwQCMAAwCwYDVR0PBAQDAgWgMGYGA1UdHwRfMF0wW6BZoFeGVWh0dHA6Ly9vbnNpdGVj cmwudmVyaXNpZ24uY29tL0ludGVybmF0aW9uYWxCdXNpbmVzc01hY2hpbmVzQ29ycENvcnBvcmF0 ZUNJTy9MYXRlc3RDUkwwggEpBgNVHSAEggEgMIIBHDCCARgGC2CGSAGG+EUBBxcCMIIBBzArBggr BgEFBQcCARYfaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYS1rcjCB1wYIKwYBBQUHAgIwgcoa gcdOb3RpY2UgVGV4dD1OT1RJQ0U6IFByaXZhdGUga2V5IG1heSBiZSByZWNvdmVyZWQgYnkgVmVy aVNpZ24ncyBjdXN0b21lciB3aG8gbWF5IGJlIGFibGUgdG8gZGVjcnlwdCBtZXNzYWdlcyB5b3Ug c2VuZCB0byBjZXJ0aWZpY2F0ZSBob2xkZXIuICBVc2UgaXMgc3ViamVjdCB0byB0ZXJtcyBhdCBo dHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhLWtyMB8GA1UdIwQYMBaAFJHBc7Bz1dmSdGfNG/FR FDQxtixaMB0GA1UdDgQWBBR5QxDRDzA36SVoNUiPr/wRhP2hpDAuBgNVHREEJzAloCMGCisGAQQB gjcUAgOgFQwTcm9sd2ViZXJAZGUuaWJtLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUH AwQwEQYJYIZIAYb4QgEBBAQDAgWgMA0GCSqGSIb3DQEBBAUAA4GBAB7tluaJS12klxLetzfJH1vE S9B1hvFGZDtFeYIOlGMy10Y+IjIVfxBz+cP9oivRr75AOezKAx2l6kVhjBnE1eqiqrLUI8sb05wi JT5RggeWC5WUgjLANWKwKQ+3NOXVc5teofo4MH1IFLWkDpWnPS0X8YEGpWmpdtvd2CSZwupMMYIC WzCCAlcCAQEwggEOMIH5MQswCQYDVQQGEwJVUzE0MDIGA1UEChMrSW50ZXJuYXRpb25hbCBCdXNp bmVzcyBNYWNoaW5lcyBDb3Jwb3JhdGlvbjEfMB0GA1UECxMWVmVyaVNpZ24gVHJ1c3QgTmV0d29y azE7MDkGA1UECxMyVGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEg KGMpMDMxMDAuBgNVBAsTJ0NsYXNzIDIgT25TaXRlIEluZGl2aWR1YWwgU3Vic2NyaWJlciBDQTEk MCIGA1UEAxMbSUJNIENlcnRpZmljYXRpb24gQXV0aG9yaXR5AhA6SO4yvMvOMrfJSBkqWmj6MAkG BSsOAwIaBQCggaIwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDcw MzA4MTMyODUxWjAjBgkqhkiG9w0BCQQxFgQUXVF6Cp+1C5IpByIHTyPGENPOrlYwQwYJKoZIhvcN AQkPMTYwNDAHBgUrDgMCHTAOBggqhkiG9w0DAgICAIAwCgYIKoZIhvcNAwcwDQYIKoZIhvcNAwIC ASgwDQYJKoZIhvcNAQEBBQAEgYDVdl76ydowlz+SLBzKQLr4uyBpeTKxF/FkOx9MqFYnIshZaOgd Xj82DCIdnrM9owMxVkS0LxOnQyda6Y9Xu/okMNKTH/XBITRr/Cs2eAUMs4e0o4CPfHg/8EZYGbS5 d9fXE9vLCqCju7qZa+1DFSTXsgp2QFipblpiSuDMZBJshQAAAAA= ---------z40881_boundary_sign-- From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 15:27:58 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 44586 invoked from network); 8 Mar 2007 15:27:57 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 15:27:57 -0000 Received: (qmail 41860 invoked by uid 500); 8 Mar 2007 15:28:05 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 41850 invoked by uid 500); 8 Mar 2007 15:28:04 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 41839 invoked by uid 99); 8 Mar 2007 15:28:04 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 07:28:04 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of samanthafuller@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO ug-out-1314.google.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 07:27:52 -0800 Received: by ug-out-1314.google.com with SMTP id 30so921505ugs for <samanthafuller@example.net>; Thu, 08 Mar 2007 07:27:27 -0800 (PST) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=QGf0zJ8RFGY/vI2hIHnVWkzIekSewmD9stRz8GCgju4XUlnBirJHTppbSs7EImTmcP8QpzdyFLCcyx+QD9Tp5ibwZCzcDgf3JRBuqqw9PtzbxJJVTuZqcYNQneLc28TXezS6wtluK16RbqXFguVJGSjeXLVks0bdyivzyz/l0fs= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=MhHhWQbsXDXTWS1RVgn5bbsh9XIL7WVyo5Gdw/qkC9tgLqWZ0SeHHRXPNP0TVvAmiOrWYsSpSaX9TseAOswV226g311U6XCFWJAbb+KsQKs/p7eTxc1Y0jlEAd7JwS1VCqK+rCmwvmpHjQ1Fyk7fk6piFIPt9Ireb0jzEBPijrs= Received: by 83.161.120.155 with SMTP id w2mr162209wae.1173367646098; Thu, 08 Mar 2007 07:27:26 -0800 (PST) Received: by 83.161.120.155 with HTTP; Thu, 8 Mar 2007 07:27:26 -0800 (PST) Message-ID: <samanthafuller@example.net> Date: Thu, 8 Mar 2007 07:27:26 -0800 From: "Julius Davies" <samanthafuller@example.net> To: "HttpClient User Discussion" <samanthafuller@example.net> Subject: Re: Certificate Based Client Authentication In-Reply-To: <samanthafuller@example.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <samanthafuller@example.net> <samanthafuller@example.net> X-Virus-Checked: Checked by ClamAV on apache.org Hi, Lalit, Consider downloading "not-yet-commons-ssl-0.3.7.jar" from here: http://juliusdavies.ca/commons-ssl/download.html With "not-yet-commons-ssl-0.3.7.jar" on your classpath, you can do this: ------------------------------------------------------ char[] pwd = "secret".toCharArray(); KeyMaterial km = new KeyMaterial( "/path/to/client_cert.p12", pwd ); TrustMaterial tm = new TrustMaterial( "/path/to/server_cert.pem" ); HttpSecureProtocol sf = new HttpSecureProtocol(); sf.setKeyMaterial( km ); sf.addTrustMaterial( tm ); // Alternatively, if you want to disable Java's standard "cacerts", you // can use setTrustMaterial() instead of addTrustMaterial(): // sf.setTrustMaterial( tm ); ProtocolSocketFactory psf = sf; Protocol specialHttps = new Protocol("https-special", psf, 443); Protocol.registerProtocol("https-special", specialHttps); // From this point on, HttpClient will use the client cert specified // for all URL's of the form "https-special://". ------------------------------------------------------ If you don't have the server's X509 certificate on hand, you can download the certificate straight from the server by using the "not-yet-commons-ssl" Ping utility, documented here: http://juliusdavies.ca/commons-ssl/utilities.html However, be aware that acquiring and trusting a certificate in this way is not secure, since someone could impersonate the server in that one moment. It's better to acquire the server certificate "out-of-band" through the mail or encrypted zip file or something like that. If you must acquire the certificate using the "Ping" utility, at the very least call the server's administrator and verify the fingerprint of the certificate you downloaded! * * * The rest of this email explains how to do things without "not-yet-commons-ssl-0.3.7". It's possible to do what you're doing without "not-yet-commons-ssl-0.3.7.jar", and just using the contrib AuthSSLProtocolSocketFactory alone. If you want to do things that way, create a special "TrustStore" JKS file and import the server's certificate into it like so: ------------------------------------------------------ keytool -import -file x509.pem -keystore my_new_truststore.jks ------------------------------------------------------ The "x509.pem" file should look like this, but with several lines of base64 - not just those two lines I've put in this example. -----BEGIN CERTIFICATE----- MIIGADCCA+gCCQDyLXt3uNXa9TANBgkqhkiG9w0BAQUFADCBwTELMAkGA1UEBhMC Q0ExGTAXBgNVBAgTEEJyaXRpc2ggQ29sdW1iaWExEjAQBgNVBAcTCVZhbmNvdXZl -----END CERTIFICATE----- Keytool is a bit picky and might get upset if the PEM file contains ANYTHING before or after the "BEGIN" and "END" lines, including whitespace. Make sure there are no extra line-feeds or carriage returns before and after the "BEGIN" and "END". Once you have both the "keystore" and "truststore" ready (both are java keystore files), you can do this: ------------------------------------------------------ URL keystore = new URL( "file:///path/to/keystore.jks" ); URL truststore = new URL( "file:///path/to/truststore.jks" ); String key_pwd = "secret"; String trust_pwd = "changeit"; AuthSSLProtocolSocketFactory sf; sf = new AuthSSLProtocolSocketFactory( keystore, key_pwd, truststore, trust_pwd ); ------------------------------------------------------ If your client certificate is in PKCS12 format (e.g. *.pfx or *.p12) after exporting from a browser, you can use the KeyStoreBuilder utility in "not-yet-commons-ssl-0.3.7" to convert it to "Java Keystore" format on the command line. The original AuthSSLProtocolSocketFactory in HttpClient's "contrib" cannot deal with PKCS12. java -cp not-yet-commons-ssl-0.3.7.jar org.apache.commons.ssl.KeyStoreBuilder Good luck! yours, Julius On 3/8/07, Roland Weber <samanthafuller@example.net> wrote: > Hello Lalit, > > Julius Davis has written some detailed mails about SSL in the last months. > You may have to search the developer list as well as the user list. > > best regards, > Roland > > > -- yours, Julius Davies +1-816-803-1074 http://juliusdavies.ca/ --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 15:35:14 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 47688 invoked from network); 8 Mar 2007 15:35:13 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 15:35:13 -0000 Received: (qmail 57370 invoked by uid 500); 8 Mar 2007 15:35:22 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 57113 invoked by uid 500); 8 Mar 2007 15:35:21 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 57102 invoked by uid 99); 8 Mar 2007 15:35:21 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 07:35:21 -0800 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: local policy) Received: from [83.161.120.155] (HELO southendmsg.SONATA.LOCAL) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 07:35:10 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: Certificate Based Client Authentication Date: Thu, 8 Mar 2007 21:05:41 +0530 Message-ID: <samanthafuller@example.net> In-Reply-To: <samanthafuller@example.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Certificate Based Client Authentication Thread-Index: AcdhlqGC1/nGpIfKTL6szIRzA97uJQAAH0HA References: <samanthafuller@example.net> <samanthafuller@example.net> <samanthafuller@example.net> From: "Lalit Sahoo" <samanthafuller@example.net> To: "HttpClient User Discussion" <samanthafuller@example.net> X-Virus-Checked: Checked by ClamAV on apache.org Hi Julius, Thanks for the response! You have adviced me to do in this way: URL keystore =3D new URL( "file:///path/to/keystore.jks" ); URL = truststore =3D new URL( "file:///path/to/truststore.jks" ); String key_pwd =3D "secret"; String trust_pwd =3D "changeit"; =09 AuthSSLProtocolSocketFactory sf; sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, truststore, trust_pwd ); Supoose I don't want to authenticate server then I should use as below: AuthSSLProtocolSocketFactory sf; sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null = ); But I am getting SSL handshake error. Could you please help? Regards, Lalit -----Original Message----- From: Julius Davies [mailto:samanthafuller@example.net]=20 Sent: Thursday, March 08, 2007 8:57 PM To: HttpClient User Discussion Subject: Re: Certificate Based Client Authentication Hi, Lalit, Consider downloading "not-yet-commons-ssl-0.3.7.jar" from here: http://juliusdavies.ca/commons-ssl/download.html With "not-yet-commons-ssl-0.3.7.jar" on your classpath, you can do this: ------------------------------------------------------ char[] pwd =3D "secret".toCharArray(); KeyMaterial km =3D new KeyMaterial( "/path/to/client_cert.p12", pwd ); TrustMaterial tm =3D new TrustMaterial( "/path/to/server_cert.pem" ); HttpSecureProtocol sf =3D new HttpSecureProtocol(); sf.setKeyMaterial( km ); sf.addTrustMaterial( tm ); =09 // Alternatively, if you want to disable Java's standard "cacerts", you // can use setTrustMaterial() instead of addTrustMaterial(): // sf.setTrustMaterial( tm ); =09 ProtocolSocketFactory psf =3D sf; Protocol specialHttps =3D new Protocol("https-special", psf, 443); Protocol.registerProtocol("https-special", specialHttps); // From this point on, HttpClient will use the client cert specified // for all URL's of the form "https-special://". ------------------------------------------------------ If you don't have the server's X509 certificate on hand, you can download the certificate straight from the server by using the "not-yet-commons-ssl" Ping utility, documented here: http://juliusdavies.ca/commons-ssl/utilities.html However, be aware that acquiring and trusting a certificate in this way is not secure, since someone could impersonate the server in that one moment. It's better to acquire the server certificate "out-of-band" through the mail or encrypted zip file or something like that. If you must acquire the certificate using the "Ping" utility, at the very least call the server's administrator and verify the fingerprint of the certificate you downloaded! * * * The rest of this email explains how to do things without "not-yet-commons-ssl-0.3.7". It's possible to do what you're doing without "not-yet-commons-ssl-0.3.7.jar", and just using the contrib AuthSSLProtocolSocketFactory alone. If you want to do things that way, create a special "TrustStore" JKS file and import the server's certificate into it like so: ------------------------------------------------------ keytool -import -file x509.pem -keystore my_new_truststore.jks ------------------------------------------------------ The "x509.pem" file should look like this, but with several lines of base64 - not just those two lines I've put in this example. -----BEGIN CERTIFICATE----- MIIGADCCA+gCCQDyLXt3uNXa9TANBgkqhkiG9w0BAQUFADCBwTELMAkGA1UEBhMC Q0ExGTAXBgNVBAgTEEJyaXRpc2ggQ29sdW1iaWExEjAQBgNVBAcTCVZhbmNvdXZl -----END CERTIFICATE----- Keytool is a bit picky and might get upset if the PEM file contains ANYTHING before or after the "BEGIN" and "END" lines, including whitespace. Make sure there are no extra line-feeds or carriage returns before and after the "BEGIN" and "END". Once you have both the "keystore" and "truststore" ready (both are java keystore files), you can do this: ------------------------------------------------------ URL keystore =3D new URL( "file:///path/to/keystore.jks" ); URL truststore =3D new URL( "file:///path/to/truststore.jks" ); String key_pwd =3D "secret"; String trust_pwd =3D "changeit"; =09 AuthSSLProtocolSocketFactory sf; sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, truststore, trust_pwd ); ------------------------------------------------------ If your client certificate is in PKCS12 format (e.g. *.pfx or *.p12) after exporting from a browser, you can use the KeyStoreBuilder utility in "not-yet-commons-ssl-0.3.7" to convert it to "Java Keystore" format on the command line. The original AuthSSLProtocolSocketFactory in HttpClient's "contrib" cannot deal with PKCS12. java -cp not-yet-commons-ssl-0.3.7.jar org.apache.commons.ssl.KeyStoreBuilder Good luck! yours, Julius On 3/8/07, Roland Weber <samanthafuller@example.net> wrote: > Hello Lalit, > > Julius Davis has written some detailed mails about SSL in the last months. > You may have to search the developer list as well as the user list. > > best regards, > Roland > > > --=20 yours, Julius Davies +1-816-803-1074 http://juliusdavies.ca/ --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 16:29:29 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 66892 invoked from network); 8 Mar 2007 16:29:29 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 16:29:29 -0000 Received: (qmail 122 invoked by uid 500); 8 Mar 2007 16:29:36 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 114 invoked by uid 500); 8 Mar 2007 16:29:36 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 103 invoked by uid 99); 8 Mar 2007 16:29:36 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 08:29:36 -0800 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=DRUGS_SLEEP,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of samanthafuller@example.net designates 83.161.120.155 as permitted sender) Received: from [83.161.120.155] (HELO ug-out-1314.google.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 08:29:25 -0800 Received: by ug-out-1314.google.com with SMTP id 30so941447ugs for <samanthafuller@example.net>; Thu, 08 Mar 2007 08:28:58 -0800 (PST) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=eAX74Z/djC+LADpvIN7/O30jvml6ndgAflsFVeG8o5KTvsOAeEo2ozcIcX9lsynhASceCPFmYFftOQywzVPw5mn30Q0m6OZFVnuldvEpcm+UjE9m6C2E5XkTy3rs87RwFdUNudaJGbTpBNoEYbuIA2229rcYajM0veqXwCxTiTw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=ZkuOkIBIZbOU97RqcQDC0PercSkgu22fCbphe3A5KSuVF6j7bek6ERCPy59GmA63mGrg4ISfeKDGnwa4StaCnW4qa1W71sWJETXy5DRdx2EAhGlAPCFCLJsIRL4ekZmeo0YnX/lY3U1aw8NuL9xOD77a1BndUXg9WkXwiU5/Gag= Received: by 83.161.120.155 with SMTP id r2mr200890wae.1173371337048; Thu, 08 Mar 2007 08:28:57 -0800 (PST) Received: by 83.161.120.155 with HTTP; Thu, 8 Mar 2007 08:28:57 -0800 (PST) Message-ID: <samanthafuller@example.net> Date: Thu, 8 Mar 2007 08:28:57 -0800 From: "Julius Davies" <samanthafuller@example.net> To: "HttpClient User Discussion" <samanthafuller@example.net> Subject: Re: Certificate Based Client Authentication In-Reply-To: <samanthafuller@example.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <samanthafuller@example.net> <samanthafuller@example.net> <samanthafuller@example.net> <samanthafuller@example.net> X-Virus-Checked: Checked by ClamAV on apache.org Hi, Lalit, If you really, really, really are sure that you don't want to "authenticate" the server (not recommended!) you can use TrustMaterial.TRUST_ALL with "not-yet-commons-ssl-0.3.7.jar" like so: ------------------------------------------------------ char[] pwd = "secret".toCharArray(); KeyMaterial km = new KeyMaterial( "/path/to/client_cert.p12", pwd ); HttpSecureProtocol sf = new HttpSecureProtocol(); sf.setKeyMaterial( km ); // Trust ANY server! NOT RECOMMENDED! sf.setTrustMaterial( TrustMaterial.TRUST_ALL ); ProtocolSocketFactory psf = sf; Protocol specialHttps = new Protocol("https-special", psf, 443); Protocol.registerProtocol("https-special", specialHttps); // From this point on, HttpClient will use the client cert specified // for all URL's of the form "https-special://". ------------------------------------------------------ To do this just using the "HttpClient" contrib code is not possible. Giving "null" to the AuthSSLProtocolSocketFactory just tells it to use $JAVA_HOME/jre/lib/security/cacerts as the "truststore": new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null ); What you're trying to do is essentially a hybrid of "EasySSLProtocolSocketFactory" (trusting any server), and "AuthSSLProtocolSocketFactory" (providing a client certificate). If you don't want to use not-yet-commons-ssl-0.3.7, you'll have to code up the hybrid yourself using the "contrib" code to guide you. yours, Julius On 3/8/07, Lalit Sahoo <samanthafuller@example.net> wrote: > Hi Julius, > > Thanks for the response! > > You have adviced me to do in this way: > > URL keystore = new URL( "file:///path/to/keystore.jks" ); URL truststore > = new URL( "file:///path/to/truststore.jks" ); String key_pwd = > "secret"; > String trust_pwd = "changeit"; > > AuthSSLProtocolSocketFactory sf; > sf = new AuthSSLProtocolSocketFactory( keystore, key_pwd, truststore, > trust_pwd ); > > > Supoose I don't want to authenticate server then I should use as below: > > > AuthSSLProtocolSocketFactory sf; > sf = new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null ); > > But I am getting SSL handshake error. > > Could you please help? > > Regards, > Lalit > -- yours, Julius Davies +1-816-803-1074 http://juliusdavies.ca/ --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net From httpclient-user-returnsamanthafuller@example.net Thu Mar 08 18:37:37 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 15722 invoked from network); 8 Mar 2007 18:37:37 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 8 Mar 2007 18:37:37 -0000 Received: (qmail 19411 invoked by uid 500); 8 Mar 2007 18:37:45 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 19403 invoked by uid 500); 8 Mar 2007 18:37:45 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 19392 invoked by uid 99); 8 Mar 2007 18:37:45 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 10:37:45 -0800 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=DRUGS_SLEEP X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: local policy) Received: from [83.161.120.155] (HELO southendmsg.SONATA.LOCAL) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 08 Mar 2007 10:37:33 -0800 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C761B0.E89C82C7" Subject: RE: Certificate Based Client Authentication Date: Fri, 9 Mar 2007 00:06:07 +0530 Message-ID: <samanthafuller@example.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: <samanthafuller@example.net> Thread-Topic: Certificate Based Client Authentication Thread-Index: AcdhnzmWnbYFk6YTTLShpghpNwvRTgAEWlGe References: <samanthafuller@example.net><samanthafuller@example.net><samanthafuller@example.net><samanthafuller@example.net> <samanthafuller@example.net> From: "Lalit Sahoo" <samanthafuller@example.net> To: "HttpClient User Discussion" <samanthafuller@example.net> X-Virus-Checked: Checked by ClamAV on apache.org ------_=_NextPart_001_01C761B0.E89C82C7 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Julius, =20 Thanks for the help! =20 Actually I am using Weblogic 8.1. =20 I have configured weblogic to use two-way SSL. =20 Do I need to do anything on server side to stop server authentication? =20 Regards, Lalit ________________________________ From: Julius Davies [mailto:samanthafuller@example.net] Sent: Thu 3/8/2007 9:58 PM To: HttpClient User Discussion Subject: Re: Certificate Based Client Authentication Hi, Lalit, If you really, really, really are sure that you don't want to "authenticate" the server (not recommended!) you can use TrustMaterial.TRUST_ALL with "not-yet-commons-ssl-0.3.7.jar" like so: ------------------------------------------------------ char[] pwd =3D "secret".toCharArray(); KeyMaterial km =3D new KeyMaterial( "/path/to/client_cert.p12", pwd ); HttpSecureProtocol sf =3D new HttpSecureProtocol(); sf.setKeyMaterial( km ); // Trust ANY server! NOT RECOMMENDED! sf.setTrustMaterial( TrustMaterial.TRUST_ALL ); ProtocolSocketFactory psf =3D sf; Protocol specialHttps =3D new Protocol("https-special", psf, 443); Protocol.registerProtocol("https-special", specialHttps); // From this point on, HttpClient will use the client cert specified // for all URL's of the form "https-special://". ------------------------------------------------------ To do this just using the "HttpClient" contrib code is not possible. Giving "null" to the AuthSSLProtocolSocketFactory just tells it to use $JAVA_HOME/jre/lib/security/cacerts as the "truststore": new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null ); What you're trying to do is essentially a hybrid of "EasySSLProtocolSocketFactory" (trusting any server), and "AuthSSLProtocolSocketFactory" (providing a client certificate). If you don't want to use not-yet-commons-ssl-0.3.7, you'll have to code up the hybrid yourself using the "contrib" code to guide you. yours, Julius On 3/8/07, Lalit Sahoo <samanthafuller@example.net> wrote: > Hi Julius, > > Thanks for the response! > > You have adviced me to do in this way: > > URL keystore =3D new URL( "file:///path/to/keystore.jks" ); URL = truststore > =3D new URL( "file:///path/to/truststore.jks" ); String key_pwd =3D > "secret"; > String trust_pwd =3D "changeit"; > > AuthSSLProtocolSocketFactory sf; > sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, = truststore, > trust_pwd ); > > > Supoose I don't want to authenticate server then I should use as = below: > > > AuthSSLProtocolSocketFactory sf; > sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null = ); > > But I am getting SSL handshake error. > > Could you please help? > > Regards, > Lalit > -- yours, Julius Davies +1-816-803-1074 http://juliusdavies.ca/ --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net ------_=_NextPart_001_01C761B0.E89C82C7 Content-Type: text/plain; charset=us-ascii --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net ------_=_NextPart_001_01C761B0.E89C82C7-- From httpclient-user-returnsamanthafuller@example.net Sat Mar 10 15:30:16 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 53847 invoked from network); 10 Mar 2007 15:30:15 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 10 Mar 2007 15:30:15 -0000 Received: (qmail 63122 invoked by uid 500); 10 Mar 2007 15:30:23 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 63103 invoked by uid 500); 10 Mar 2007 15:30:23 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 63092 invoked by uid 99); 10 Mar 2007 15:30:23 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 10 Mar 2007 07:30:23 -0800 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=DRUGS_SLEEP X-Spam-Check-By: apache.org Received-SPF: neutral (herse.apache.org: local policy) Received: from [83.161.120.155] (HELO ug-out-1314.google.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 10 Mar 2007 07:30:11 -0800 Received: by ug-out-1314.google.com with SMTP id 30so1588826ugs for <samanthafuller@example.net>; Sat, 10 Mar 2007 07:29:50 -0800 (PST) Received: by 83.161.120.155 with SMTP id j1mr295445wag.1173540589064; Sat, 10 Mar 2007 07:29:49 -0800 (PST) Received: from shrek ( [83.161.120.155]) by mx.google.com with ESMTP id 36sm5500896nzk.283.161.120.155.29.46; Sat, 10 Mar 2007 07:29:48 -0800 (PST) From: "William Cai" <samanthafuller@example.net> To: "'HttpClient User Discussion'" <samanthafuller@example.net> References: <samanthafuller@example.net><samanthafuller@example.net><samanthafuller@example.net><samanthafuller@example.net> <samanthafuller@example.net> <samanthafuller@example.net> Subject: RE: Certificate Based Client Authentication Date: Sat, 10 Mar 2007 23:29:40 +0800 Message-ID: <004301c76328$efc9a600$9400a8c0@shrek> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 In-Reply-To: <samanthafuller@example.net> thread-index: AcdhnzmWnbYFk6YTTLShpghpNwvRTgAEWlGeAF4RTBA= X-Virus-Checked: Checked by ClamAV on apache.org You may know the link = http://e-docs.bea.com/wls/docs81/secmanage/ssl.html#1166927. Since you = choose two-way SSL, it doesn't make sense to disable server side = authentication. I doubt if there is such an option available. Please = correct me if I'm wrong. Thanks, William -----Original Message----- From: Lalit Sahoo [mailto:samanthafuller@example.net]=20 Sent: Friday, March 09, 2007 2:36 AM To: HttpClient User Discussion Subject: RE: Certificate Based Client Authentication Hi Julius, =20 Thanks for the help! =20 Actually I am using Weblogic 8.1. =20 I have configured weblogic to use two-way SSL. =20 Do I need to do anything on server side to stop server authentication? =20 Regards, Lalit ________________________________ From: Julius Davies [mailto:samanthafuller@example.net] Sent: Thu 3/8/2007 9:58 PM To: HttpClient User Discussion Subject: Re: Certificate Based Client Authentication Hi, Lalit, If you really, really, really are sure that you don't want to "authenticate" the server (not recommended!) you can use TrustMaterial.TRUST_ALL with "not-yet-commons-ssl-0.3.7.jar" like so: ------------------------------------------------------ char[] pwd =3D "secret".toCharArray(); KeyMaterial km =3D new KeyMaterial( "/path/to/client_cert.p12", pwd ); HttpSecureProtocol sf =3D new HttpSecureProtocol(); sf.setKeyMaterial( km ); // Trust ANY server! NOT RECOMMENDED! sf.setTrustMaterial( TrustMaterial.TRUST_ALL ); ProtocolSocketFactory psf =3D sf; Protocol specialHttps =3D new Protocol("https-special", psf, 443); Protocol.registerProtocol("https-special", specialHttps); // From this point on, HttpClient will use the client cert specified // for all URL's of the form "https-special://". ------------------------------------------------------ To do this just using the "HttpClient" contrib code is not possible. Giving "null" to the AuthSSLProtocolSocketFactory just tells it to use $JAVA_HOME/jre/lib/security/cacerts as the "truststore": new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null ); What you're trying to do is essentially a hybrid of "EasySSLProtocolSocketFactory" (trusting any server), and "AuthSSLProtocolSocketFactory" (providing a client certificate). If you don't want to use not-yet-commons-ssl-0.3.7, you'll have to code up the hybrid yourself using the "contrib" code to guide you. yours, Julius On 3/8/07, Lalit Sahoo <samanthafuller@example.net> wrote: > Hi Julius, > > Thanks for the response! > > You have adviced me to do in this way: > > URL keystore =3D new URL( "file:///path/to/keystore.jks" ); URL = truststore > =3D new URL( "file:///path/to/truststore.jks" ); String key_pwd =3D > "secret"; > String trust_pwd =3D "changeit"; > > AuthSSLProtocolSocketFactory sf; > sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, = truststore, > trust_pwd ); > > > Supoose I don't want to authenticate server then I should use as = below: > > > AuthSSLProtocolSocketFactory sf; > sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null = ); > > But I am getting SSL handshake error. > > Could you please help? > > Regards, > Lalit > -- yours, Julius Davies +1-816-803-1074 http://juliusdavies.ca/ --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net From httpclient-user-returnsamanthafuller@example.net Sat Mar 10 15:30:17 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 53857 invoked from network); 10 Mar 2007 15:30:17 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 10 Mar 2007 15:30:17 -0000 Received: (qmail 63657 invoked by uid 500); 10 Mar 2007 15:30:26 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 63409 invoked by uid 500); 10 Mar 2007 15:30:24 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 63393 invoked by uid 99); 10 Mar 2007 15:30:24 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 10 Mar 2007 07:30:24 -0800 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=DRUGS_SLEEP X-Spam-Check-By: apache.org Received-SPF: neutral (herse.apache.org: local policy) Received: from [83.161.120.155] (HELO wr-out-0506.google.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 10 Mar 2007 07:30:12 -0800 Received: by wr-out-0506.google.com with SMTP id 58so1694356wri for <samanthafuller@example.net>; Sat, 10 Mar 2007 07:29:51 -0800 (PST) Received: by 83.161.120.155 with SMTP id n16mr972678agb.1173540591801; Sat, 10 Mar 2007 07:29:51 -0800 (PST) Received: from shrek ( [83.161.120.155]) by mx.google.com with ESMTP id 36sm5500896nzk.283.161.120.155.29.49; Sat, 10 Mar 2007 07:29:51 -0800 (PST) From: "William Cai" <samanthafuller@example.net> To: "'HttpClient User Discussion'" <samanthafuller@example.net> References: <samanthafuller@example.net><samanthafuller@example.net><samanthafuller@example.net><samanthafuller@example.net> <samanthafuller@example.net> <samanthafuller@example.net> Subject: RE: Certificate Based Client Authentication Date: Sat, 10 Mar 2007 23:29:40 +0800 Message-ID: <004401c76328$f1788e80$9400a8c0@shrek> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 In-Reply-To: <samanthafuller@example.net> thread-index: AcdhnzmWnbYFk6YTTLShpghpNwvRTgAEWlGeAF4LmvA= X-Virus-Checked: Checked by ClamAV on apache.org You may know the link = http://e-docs.bea.com/wls/docs81/secmanage/ssl.html#1166927. Since you = choose two-way SSL, it doesn't make sense to disable server side = authentication. I doubt if there is such an option available. Please = correct me if I'm wrong. Thanks, William -----Original Message----- From: Lalit Sahoo [mailto:samanthafuller@example.net]=20 Sent: Friday, March 09, 2007 2:36 AM To: HttpClient User Discussion Subject: RE: Certificate Based Client Authentication Hi Julius, =20 Thanks for the help! =20 Actually I am using Weblogic 8.1. =20 I have configured weblogic to use two-way SSL. =20 Do I need to do anything on server side to stop server authentication? =20 Regards, Lalit ________________________________ From: Julius Davies [mailto:samanthafuller@example.net] Sent: Thu 3/8/2007 9:58 PM To: HttpClient User Discussion Subject: Re: Certificate Based Client Authentication Hi, Lalit, If you really, really, really are sure that you don't want to "authenticate" the server (not recommended!) you can use TrustMaterial.TRUST_ALL with "not-yet-commons-ssl-0.3.7.jar" like so: ------------------------------------------------------ char[] pwd =3D "secret".toCharArray(); KeyMaterial km =3D new KeyMaterial( "/path/to/client_cert.p12", pwd ); HttpSecureProtocol sf =3D new HttpSecureProtocol(); sf.setKeyMaterial( km ); // Trust ANY server! NOT RECOMMENDED! sf.setTrustMaterial( TrustMaterial.TRUST_ALL ); ProtocolSocketFactory psf =3D sf; Protocol specialHttps =3D new Protocol("https-special", psf, 443); Protocol.registerProtocol("https-special", specialHttps); // From this point on, HttpClient will use the client cert specified // for all URL's of the form "https-special://". ------------------------------------------------------ To do this just using the "HttpClient" contrib code is not possible. Giving "null" to the AuthSSLProtocolSocketFactory just tells it to use $JAVA_HOME/jre/lib/security/cacerts as the "truststore": new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null ); What you're trying to do is essentially a hybrid of "EasySSLProtocolSocketFactory" (trusting any server), and "AuthSSLProtocolSocketFactory" (providing a client certificate). If you don't want to use not-yet-commons-ssl-0.3.7, you'll have to code up the hybrid yourself using the "contrib" code to guide you. yours, Julius On 3/8/07, Lalit Sahoo <samanthafuller@example.net> wrote: > Hi Julius, > > Thanks for the response! > > You have adviced me to do in this way: > > URL keystore =3D new URL( "file:///path/to/keystore.jks" ); URL = truststore > =3D new URL( "file:///path/to/truststore.jks" ); String key_pwd =3D > "secret"; > String trust_pwd =3D "changeit"; > > AuthSSLProtocolSocketFactory sf; > sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, = truststore, > trust_pwd ); > > > Supoose I don't want to authenticate server then I should use as = below: > > > AuthSSLProtocolSocketFactory sf; > sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null = ); > > But I am getting SSL handshake error. > > Could you please help? > > Regards, > Lalit > -- yours, Julius Davies +1-816-803-1074 http://juliusdavies.ca/ --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net From httpclient-user-returnsamanthafuller@example.net Sat Mar 10 15:30:22 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 53974 invoked from network); 10 Mar 2007 15:30:22 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (83.161.120.155) by minotaur.apache.org with SMTP; 10 Mar 2007 15:30:22 -0000 Received: (qmail 63904 invoked by uid 500); 10 Mar 2007 15:30:30 -0000 Delivered-To: samanthafuller@example.net Received: (qmail 63893 invoked by uid 500); 10 Mar 2007 15:30:30 -0000 Mailing-List: contact samanthafuller@example.net; run by ezmlm Precedence: bulk List-Help: <mailto:samanthafuller@example.net> List-Unsubscribe: <mailto:samanthafuller@example.net> List-Post: <mailto:samanthafuller@example.net> List-Id: "HttpClient User Discussion" <httpclient-user.jakarta.apache.org> Reply-To: "HttpClient User Discussion" <samanthafuller@example.net> Delivered-To: mailing list samanthafuller@example.net Received: (qmail 63882 invoked by uid 99); 10 Mar 2007 15:30:29 -0000 Received: from herse.apache.org (HELO herse.apache.org) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 10 Mar 2007 07:30:29 -0800 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=DRUGS_SLEEP X-Spam-Check-By: apache.org Received-SPF: neutral (herse.apache.org: local policy) Received: from [83.161.120.155] (HELO nf-out-0910.google.com) (83.161.120.155) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 10 Mar 2007 07:30:17 -0800 Received: by nf-out-0910.google.com with SMTP id l36so1529324nfa for <samanthafuller@example.net>; Sat, 10 Mar 2007 07:29:55 -0800 (PST) Received: by 83.161.120.155 with SMTP id d1mr308171wal.1173540594759; Sat, 10 Mar 2007 07:29:54 -0800 (PST) Received: from shrek ( [83.161.120.155]) by mx.google.com with ESMTP id 36sm5500896nzk.283.161.120.155.29.52; Sat, 10 Mar 2007 07:29:53 -0800 (PST) From: "William Cai" <samanthafuller@example.net> To: "'HttpClient User Discussion'" <samanthafuller@example.net> References: <samanthafuller@example.net><samanthafuller@example.net><samanthafuller@example.net><samanthafuller@example.net> <samanthafuller@example.net> <samanthafuller@example.net> Subject: RE: Certificate Based Client Authentication Date: Sat, 10 Mar 2007 23:29:40 +0800 Message-ID: <004501c76328$f31e4f40$9400a8c0@shrek> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 In-Reply-To: <samanthafuller@example.net> thread-index: AcdhnzmWnbYFk6YTTLShpghpNwvRTgAEWlGeAF4HcgA= X-Virus-Checked: Checked by ClamAV on apache.org You may know the link = http://e-docs.bea.com/wls/docs81/secmanage/ssl.html#1166927. Since you = choose two-way SSL, it doesn't make sense to disable server side = authentication. I doubt if there is such an option available. Please = correct me if I'm wrong. Thanks, William -----Original Message----- From: Lalit Sahoo [mailto:samanthafuller@example.net]=20 Sent: Friday, March 09, 2007 2:36 AM To: HttpClient User Discussion Subject: RE: Certificate Based Client Authentication Hi Julius, =20 Thanks for the help! =20 Actually I am using Weblogic 8.1. =20 I have configured weblogic to use two-way SSL. =20 Do I need to do anything on server side to stop server authentication? =20 Regards, Lalit ________________________________ From: Julius Davies [mailto:samanthafuller@example.net] Sent: Thu 3/8/2007 9:58 PM To: HttpClient User Discussion Subject: Re: Certificate Based Client Authentication Hi, Lalit, If you really, really, really are sure that you don't want to "authenticate" the server (not recommended!) you can use TrustMaterial.TRUST_ALL with "not-yet-commons-ssl-0.3.7.jar" like so: ------------------------------------------------------ char[] pwd =3D "secret".toCharArray(); KeyMaterial km =3D new KeyMaterial( "/path/to/client_cert.p12", pwd ); HttpSecureProtocol sf =3D new HttpSecureProtocol(); sf.setKeyMaterial( km ); // Trust ANY server! NOT RECOMMENDED! sf.setTrustMaterial( TrustMaterial.TRUST_ALL ); ProtocolSocketFactory psf =3D sf; Protocol specialHttps =3D new Protocol("https-special", psf, 443); Protocol.registerProtocol("https-special", specialHttps); // From this point on, HttpClient will use the client cert specified // for all URL's of the form "https-special://". ------------------------------------------------------ To do this just using the "HttpClient" contrib code is not possible. Giving "null" to the AuthSSLProtocolSocketFactory just tells it to use $JAVA_HOME/jre/lib/security/cacerts as the "truststore": new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null ); What you're trying to do is essentially a hybrid of "EasySSLProtocolSocketFactory" (trusting any server), and "AuthSSLProtocolSocketFactory" (providing a client certificate). If you don't want to use not-yet-commons-ssl-0.3.7, you'll have to code up the hybrid yourself using the "contrib" code to guide you. yours, Julius On 3/8/07, Lalit Sahoo <samanthafuller@example.net> wrote: > Hi Julius, > > Thanks for the response! > > You have adviced me to do in this way: > > URL keystore =3D new URL( "file:///path/to/keystore.jks" ); URL = truststore > =3D new URL( "file:///path/to/truststore.jks" ); String key_pwd =3D > "secret"; > String trust_pwd =3D "changeit"; > > AuthSSLProtocolSocketFactory sf; > sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, = truststore, > trust_pwd ); > > > Supoose I don't want to authenticate server then I should use as = below: > > > AuthSSLProtocolSocketFactory sf; > sf =3D new AuthSSLProtocolSocketFactory( keystore, key_pwd, null, null = ); > > But I am getting SSL handshake error. > > Could you please help? > > Regards, > Lalit > -- yours, Julius Davies +1-816-803-1074 http://juliusdavies.ca/ --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net --------------------------------------------------------------------- To unsubscribe, e-mail: samanthafuller@example.net For additional commands, e-mail: samanthafuller@example.net From httpclient-user-returnsamanthafuller@example.net Sat Mar 10 16:07:10 2007 Return-Path: <httpclient-user-returnsamanthafuller@example.net> Delivered-To: samanthafuller@example.net Received: (qmail 60484 invoked from network); 10 Mar
{'source': 'Apache Software Foundation Public Mail Archives'}