Only requiring client certificate authentication for some application resources while still using TLS/SSL for the rest of the application

Solution Verified - Updated -

Issue

  • When using verify-client='want' in the JBossWeb configuration, the certificate is requested when a non-protected url is accessed. However, I want that the client certificate be requested only when the user tries to access a secured resource.
  • Securing only some pages in my application with client certificate authentication while still using TLS/SSL for the entire application

Environment

  • Red Hat JBoss Enterprise Application Platform
    • 6

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.