简体繁体 English

Tomcat 作为客户端认证

[英]Tomcat as a client authentication

原文 2020-07-18 19:22:03 2 1 authentication/ tomcat/ client

I have a tomcat server with microservice wars, one WAR that connects with another system, another system requires client authentication, and i have the certificate how to load the certificate with the communication with that system, i tried to use this certificate in the HTTPS encription but failed, kindly advice i want to load a certififcate if the tomcat will connect with a certain URL, i mean that the tomcat will be the client not the server, i know how to make tomcat require client authentication as a server but if there is another system and the tomcat here is the client, how to insert the certificate in tomcat, the application is java, and the os is linus redhat 7 i tried to inst the certificate to OS level and cacert but same我有一个带有微服务战争的 tomcat 服务器，一个与另一个系统连接的 WAR，另一个系统需要客户端身份验证，并且我有证书如何加载与该系统通信的证书，我尝试在 HTTPS 加密中使用此证书but failed, kindly advice i want to load a certififcate if the tomcat will connect with a certain URL, i mean that the tomcat will be the client not the server, i know how to make tomcat require client authentication as a server but if there is另一个系统和tomcat这里是客户端，如何在tomcat中插入证书，应用程序是java，并且操作系统是在相同的操作系统redhat和level 7证书中尝试的

1 个解决方案

I'm at a loss since I'm not a Tomcat person.我很茫然，因为我不是 Tomcat 人。 I use tomcat as a webserver for our Java application and now we are trying to integrate with one of our customers and they require Client Authentication via SSL, so they generated and issued me an SSL certificate to use it in tomcat during the communicating with their system. I use tomcat as a webserver for our Java application and now we are trying to integrate with one of our customers and they require Client Authentication via SSL, so they generated and issued me an SSL certificate to use it in tomcat during the communicating with their system . Unfortunately, this is as far as they support it and cannot give me any direction on how to actually use it.不幸的是，这是他们支持的，不能给我任何关于如何实际使用它的指导。

So what I have is a Java application, a Tomcat app server running 8 on rehat 7, and the.p12 cert from the local CA from customer side.所以我拥有的是一个 Java 应用程序，一个在 rehat 7 上运行 8 的 Tomcat 应用程序服务器，以及来自客户端的本地 CA 的.p12 证书。

now i have 2 certificates one for SSL and another as client authentication, how to define the client authentication and attache it with my communication dealing with another system, I tried to use SSLCACertificateFile attribute but no luck,现在我有 2 个证书，一个用于 SSL，另一个作为客户端身份验证，如何定义客户端身份验证并将其附加到我与另一个系统的通信中，我尝试使用 SSLCACertificateFile 属性但没有运气，

Connector port="443" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8446" SSLEnabled="true" scheme="https" secure="true" sslProtocol="TLS" keystoreFile="fileto.p12" keystorePass="changeit" keystoreType="PKCS12" truststoreType="PKCS12" SSLCACertificateFile="CAfileto_T.p12" SSLCACertificatePass="changeit"连接器端口="443" 协议="HTTP/1.1" connectionTimeout="20000" redirectPort="8446" SSLEnabled="true" scheme="https" secure="true" sslProtocol="TLS" keystoreFile="fileto.p12" keystorePass="changeit" keystoreType="PKCS12" truststoreType="PKCS12" SSLCACertificateFile="CAfileto_T.p12" SSLCACertificatePass="changeit"

Realm className="org.apache.catalina.realm.LockOutRealm" Realm className="org.apache.catalina.realm.UserDatabaseRealm" resourceName="UserDatabase" Realm className="org.apache.catalina.realm.LockOutRealm" Realm className="org.apache.catalina.realm.UserDatabaseRealm" resourceName="UserDatabase"