Java EE Certificate-Based Mutual Authentication

I'm trying to setup “Certificate-Based Mutual Authentication” in my Java EE application. My requirement outline as follows,

Deploying a web application (Java EE on IBM Webshpere) which is pulicly available in www, but access privileges were given only for authenticated clients via certifica开发者_C百科tes.

Can someone provide me a sample code & setps that I have to follow to achieve my requirement.

---

As Stas mentioned you haven't stated anything about your application (what is the app server etc).

If your set up is WebSphere and you want to set up SSL mutual authentication, then this paper should give you a good idea:

http://www.ibm.com/developerworks/websphere/techjournal/0612_birk/0612_birk.html#sec1

The references in this article also contain good information and they should help you out.

Regarding Web Server, SSL hops would be between your App Server and the web server on the other end (and not to the WAS Server running). This does not change any configuration or the set up but you should be aware that your SSL communication would be till the web server and the web server might talk SSL to the back end application server and this depends on how it is set up.

If you provide additional information then folks here would be able to help.

HTH Manglu