SSL client authentication possible?

31 views
Skip to first unread message

mackler

unread,
Jun 4, 2011, 12:13:39 PM6/4/11
to rest-client
Apologies if this has been answered before: is it possible to use
restclient to test a server that requires SSL client authentication?

I looked at the "Using SSL in RestClient" tutorial, but that only
seems to cover situations where the server--not the client--
authenticates with a certificate. I saw a post by kronoc from a
couple months ago saying that he had modified the source to use a
separate keystore and truststore, but it doesn't seem that the
modification is part of the distributed version. His post also
suggests that restclient will treat the truststore and keystore as the
same file, but I put my client certificate+key into my truststore file
and don't see restclient sending my client certificate (but I could be
wrong...I'm using ssldump and maybe I'm reading it wrong).

I also tried running restclient with command-line options
-Djavax.net.ssl.keyStore=/path/to/keystore -
Djavax.net.ssl.keyStorePassword=myPassword

But I still don't see restclient sending my client certificate to the
server.

Am I barking up the wrong tree? Is there a better tool for doing what
I want? I will be most thankful for any hints anyone can provide.
And of course, if there is any debugging information I can copy and
post that will help, just let me know I'll be happy to do so.

Thanks very much,
Adam
Reply all
Reply to author
Forward
0 new messages