eclipse server.xml SSL 인증서 설정 및 클라이언트 인증 방법

<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"

      maxThreads="150" SSLEnabled="true" scheme="https" secure="true"

      clientAuth="false" sslProtocol="TLS"

      keystoreFile="/Users/kgy/Desktop/KCS/Entrust/workspace/Servers/keystore"

      keystorePass="entrust"/>

    <Connector port="8444" protocol="org.apache.coyote.http11.Http11Protocol"

               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"

               clientAuth="true" sslProtocol="TLS"

               keystoreFile="/Users/kgy/Desktop/KCS/Entrust/workspace/Servers/keystore"

               keystorePass="entrust"

               SSLVerifyClient="optional" 

               SSLVerifyDepth="10"/>

 

<%@ page language="java" contentType="text/html; charset=UTF-8" pageEncoding="UTF-8"%>

<%@ page import="java.security.cert.Certificate"%>

<%@ page import="java.security.cert.CertificateParsingException"%>

<%@ page import="java.security.cert.X509Certificate"%>

<%@ page import="java.util.Collection"%>

<%@ page import="java.util.List"%>

<%

     X509Certificate[] certs = (X509Certificate[])request.getAttribute("javax.servlet.request.X509Certificate");

     if (null != certs && certs.length > 0) {

    out.println("cert found count " + certs.length + "<br>");

    X509Certificate cert = certs[0];

out.println("getIssuerDN() = " + cert.getIssuerDN() + "<br>");

out.println("getSubjectDN() = " + cert.getSubjectDN() + "<br>");

out.println("getSerialNumber() = " + cert.getSerialNumber() + "<br>");

out.println("getVersion() = " + cert.getVersion() + "<br>");

 

     

     

    Collection<?> subjectAltNames = cert.getSubjectAlternativeNames();      

    if(subjectAltNames!=null) {      

for (Object subjectAltName : subjectAltNames) {

                List<?> entry = (List<?>) subjectAltName;

                if (entry == null || entry.size() < 2) {

                    continue;

                }

                Integer altNameType = (Integer) entry.get(0);

                

                out.println("altNameType " + altNameType);

                

                if (altNameType == null) {

                    continue;

                }

/*

                if (altNameType == type) {

                    String altName = (String) entry.get(1);

                    if (altName != null) {

                        result.add(altName);

                    }

                }

*/

            }      

    }

     

     

} else {

    out.println("cert not found");

}

%>