SSL 2-way handshake

[zachary...@wavestrike.com]

Is there a way to configure Stardog to require a two-way SSL handshake to require the use of a client certificate?

[Michael Grove]

On Mon, Aug 3, 2015 at 1:36 PM, <zachary...@wavestrike.com> wrote:

Is there a way to configure Stardog to require a two-way SSL handshake to require the use of a client certificate?

No.  Although I've not experimented with that.  I think most or all of that is handled in the keystore setup; so it might just be a matter of configuring the keystore properly.

Cheers,

Mike

 

--
-- --
You received this message because you are subscribed to the C&P "Stardog" group.
To post to this group, send email to sta...@clarkparsia.com
To unsubscribe from this group, send email to
stardog+u...@clarkparsia.com
For more options, visit this group at
http://groups.google.com/a/clarkparsia.com/group/stardog?hl=en

[Zachary Whitley]

I think all that's needed in Netty is to call

setNeedClientAuth(true)

on SSLEngine at the server side.

http://docs.oracle.com/javase/7/docs/api/javax/net/ssl/SSLEngine.html?is-external=true#setNeedClientAuth%28boolean%29