1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39
|
Client SSL authentication feature example
-----------------------------------------
This is an example that illustrates the use of the `WSslInfo` and
'WSslCertificate' to authenticate clients based on SSL certificates.
The example also demonstrates how this SSL based authentication can
be combined with Wt's authentication framework.
How to run
----------
See the README in the parent directory.
SSL certificates should be obtained (purchased) from Certificate Authorities,
but for testing you can use OpenSSL to generate your own test certificates.
This example requires CA public keys, server public and private keys, and
client public and private keys.
You will need to configure your webserver to work with these keys. A sample
configuration for the built-in Wt httpd is:
docroot=.
http-address=0.0.0.0
http-port=8080
https-address=0.0.0.0
https-port=4430
ssl-certificate=projects/ssl/myCA/certs/server.crt
ssl-private-key=projects/ssl/myCA/private/server.key
ssl-tmp-dh=projects/ssl/dh512.pem
ssl-enable-v3=1
ssl-client-verification=required
ssl-verify-depth=15
ssl-ca-certificates=projects/ssl/myCA/certs/myca.crt
What it illustrates
-------------------
- the use of client certificates for authentication
|