Selecting a specific client certificate for two-way SSL when keystore has multiple possible client certificates
Issue
- For JAX-WS (Apache CXF - JBossWS) client with multiple certificates in keystore, which will be sent in response to the server
CertificateRequest
- During SSL handshake process, when server sends 'CertificateRequest' during two-way SSL, how does Java decide which certificate to send if keystore contains multiple certificates.
Environment
- Java 7, 8
- Two-way SSL/TLS, or client certificate authentication, with server
- (optional) Red Hat JBoss Enterprise Application Platform 6
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.