Hello all!
I’ve a very simple question, but I’m stuck at this point for a while, so I’m afraid to disturb the community.
I’ve GeoServer 2.8 (just out of box) running on embedded Jetty. I need configure X.509 authorization.
I’ve read this paper about ten (and even more) times – http://docs.geoserver.org/latest/en/user/security/tutorials/cert/index.html – and I done all what is written (I’ve found jetty configuration instead of tomcat one).
And I still missing the point.
I’ve server-side certificate, keystore, jetty.xml, client-side certificate and all this stuff. My GeoServer is now listening to 8443 port via HTTPS (did you noticed this locked icon?).

But no certification request is made from server side, and I’m back to standard login page with user/password pair.
I’ve found also this paper - http://docs.spring.io/spring-security/site/docs/3.0.x/reference/x509.html but this is also about tomcat, and I don’t understand where should I ass these lines to enable x.509 authorization.

···
…
…
Help me please with this issue!
Yours sincerely,
Sergey Bannikov
Team Leader
IT Department
![CROC_logo_RGB-01]()
E-mail: sbannikov@anonymised.com386…
Phone: +7 (495) 974-2274 ext. 6384
Fax: +7 (495) 974-2277
Mobile: +7 (915) 040-6793
croc.ru/eng/
cloud.croc.ru/en/
Hi Sergey
Do you have a possibility to test the tutorial with tomcat ?
Do you see something in the log files (geoserver.log or the jetty log file) ?
Btw, using Jetty in a production environment is not recommended and the support of the community for Tomcat is better.
Cheers
Christian


···
On Tue, Dec 29, 2015 at 5:14 PM, Bannikov Sergey <sbannikov@anonymised.com> wrote:
Hello all!
I’ve a very simple question, but I’m stuck at this point for a while, so I’m afraid to disturb the community.
I’ve GeoServer 2.8 (just out of box) running on embedded Jetty. I need configure X.509 authorization.
I’ve read this paper about ten (and even more) times – http://docs.geoserver.org/latest/en/user/security/tutorials/cert/index.html – and I done all what is written (I’ve found jetty configuration instead of tomcat one).
And I still missing the point.
I’ve server-side certificate, keystore, jetty.xml, client-side certificate and all this stuff. My GeoServer is now listening to 8443 port via HTTPS (did you noticed this locked icon?).
![]()
But no certification request is made from server side, and I’m back to standard login page with user/password pair.
I’ve found also this paper - http://docs.spring.io/spring-security/site/docs/3.0.x/reference/x509.html but this is also about tomcat, and I don’t understand where should I ass these lines to enable x.509 authorization.
…
…
Help me please with this issue!
Yours sincerely,
Sergey Bannikov
Team Leader
IT Department
![CROC_logo_RGB-01]()
E-mail: sbannikov@anonymised.com
Phone: +7 (495) 974-2274 ext. 6384
Fax: +7 (495) 974-2277
Mobile: +7 (915) 040-6793
croc.ru/eng/
cloud.croc.ru/en/
Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
–
DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH