[Geoserver-users] GeoServer 2.8, Jetty and X.509 authentication

Hello all!

I’ve a very simple question, but I’m stuck at this point for a while, so I’m afraid to disturb the community.

I’ve GeoServer 2.8 (just out of box) running on embedded Jetty. I need configure X.509 authorization.

I’ve read this paper about ten (and even more) times – http://docs.geoserver.org/latest/en/user/security/tutorials/cert/index.html – and I done all what is written (I’ve found jetty configuration instead of tomcat one).

And I still missing the point.

I’ve server-side certificate, keystore, jetty.xml, client-side certificate and all this stuff. My GeoServer is now listening to 8443 port via HTTPS (did you noticed this locked icon?).

But no certification request is made from server side, and I’m back to standard login page with user/password pair.

I’ve found also this paper - http://docs.spring.io/spring-security/site/docs/3.0.x/reference/x509.html but this is also about tomcat, and I don’t understand where should I ass these lines to enable x.509 authorization.

image001.png

···

Help me please with this issue!

Yours sincerely,

Sergey Bannikov

Team Leader

IT Department

CROC_logo_RGB-01

E-mail: sbannikov@anonymised.com386…

Phone: +7 (495) 974-2274 ext. 6384

Fax: +7 (495) 974-2277

Mobile: +7 (915) 040-6793

croc.ru/eng/

cloud.croc.ru/en/

Hi Sergey

Do you have a possibility to test the tutorial with tomcat ?

Do you see something in the log files (geoserver.log or the jetty log file) ?

Btw, using Jetty in a production environment is not recommended and the support of the community for Tomcat is better.

Cheers
Christian

image001.png

image002.png

···

On Tue, Dec 29, 2015 at 5:14 PM, Bannikov Sergey <sbannikov@anonymised.com> wrote:

Hello all!

I’ve a very simple question, but I’m stuck at this point for a while, so I’m afraid to disturb the community.

I’ve GeoServer 2.8 (just out of box) running on embedded Jetty. I need configure X.509 authorization.

I’ve read this paper about ten (and even more) times – http://docs.geoserver.org/latest/en/user/security/tutorials/cert/index.html – and I done all what is written (I’ve found jetty configuration instead of tomcat one).

And I still missing the point.

I’ve server-side certificate, keystore, jetty.xml, client-side certificate and all this stuff. My GeoServer is now listening to 8443 port via HTTPS (did you noticed this locked icon?).

But no certification request is made from server side, and I’m back to standard login page with user/password pair.

I’ve found also this paper - http://docs.spring.io/spring-security/site/docs/3.0.x/reference/x509.html but this is also about tomcat, and I don’t understand where should I ass these lines to enable x.509 authorization.

Help me please with this issue!

Yours sincerely,

Sergey Bannikov

Team Leader

IT Department

CROC_logo_RGB-01

E-mail: sbannikov@anonymised.com

Phone: +7 (495) 974-2274 ext. 6384

Fax: +7 (495) 974-2277

Mobile: +7 (915) 040-6793

croc.ru/eng/

cloud.croc.ru/en/



Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH