Client Certificates

[Monteiro]

Is this feature implemented on the 1.2.3

https://play.lighthouseapp.com/projects/57987/tickets/908-when-using-ssl-play-always-requests-client-authentication


Nothing happens when I configure the application.conf with the line:
play.netty.clientAuth=need


to force to use the user certificate.


Is there any more thing to do?

[Monteiro]

It says on firefox:

Secure Connection Failed


An error occurred during a connection to localhost:9000.

SSL received a record that exceeded the maximum permissible length.

(Error code: ssl_error_rx_record_too_long)

On Sep 14, 12:47 am, Monteiro <hugo.monte...@gmail.com> wrote:
> Is this feature implemented on the 1.2.3
>

> https://play.lighthouseapp.com/projects/57987/tickets/908-when-using-...

[Monteiro]

01:00:09,916 INFO ~ Listening for HTTPS on port 9000 (Waiting a first
request to start) ...
01:00:14,565 DEBUG ~ Invalid certificate
javax.net.ssl.SSLHandshakeException: null cert chain
at
com.sun.net.ssl.internal.ssl.Handshaker.checkThrown(Handshaker.java:
1015)
at
com.sun.net.ssl.internal.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:
480)
at
com.sun.net.ssl.internal.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:
745)
at
com.sun.net.ssl.internal.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:
713)
at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:607)
at org.jboss.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:868)
at org.jboss.netty.handler.ssl.SslHandler.decode(SslHandler.java:605)
at
org.jboss.netty.handler.codec.frame.FrameDecoder.callDecode(FrameDecoder.java:
282)
at
org.jboss.netty.handler.codec.frame.FrameDecoder.messageReceived(FrameDecoder.java:
216)
at
org.jboss.netty.channel.SimpleChannelUpstreamHandler.handleUpstream(SimpleChannelUpstreamHandler.java:
80)
at
org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:
545)
at
org.jboss.netty.channel.DefaultChannelPipeline.sendUpstream(DefaultChannelPipeline.java:
540)
at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:
274)
at org.jboss.netty.channel.Channels.fireMessageReceived(Channels.java:
261)
at org.jboss.netty.channel.socket.nio.NioWorker.read(NioWorker.java:
349)
at
org.jboss.netty.channel.socket.nio.NioWorker.processSelectedKeys(NioWorker.java:
280)
at org.jboss.netty.channel.socket.nio.NioWorker.run(NioWorker.java:
200)
at
org.jboss.netty.util.ThreadRenamingRunnable.run(ThreadRenamingRunnable.java:
108)
at org.jboss.netty.util.internal.DeadLockProofWorker
$1.run(DeadLockProofWorker.java:44)
at java.util.concurrent.ThreadPoolExecutor
$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor
$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:680)

[Monteiro]

I've the solution for this using a jks keystore.

Thanks :-)