SSLCLCERT and SSLCLCERTR (JANUS DEFINE parameters) - Revision history

JAL: add displaytitle

2016-06-07T23:36:43Z

add displaytitle

JAL at 22:50, 7 July 2014

2014-07-07T22:50:56Z

← Older revision		Revision as of 22:50, 7 July 2014
Line 13:		Line 13:
	<ul>		<ul>
	<li>The connection should be closed with no further processing (and "MSIR.0646: Error requesting client certificate - client did not have required certificate" is journaled).		<li>The connection should be closed with no further processing (and "MSIR.0646: Error requesting client certificate - client did not have required certificate" is journaled).
	<li>Processing continues to run the <var>[[SSLNOCERTERR]]</var> exception handler, if this is a <var>[[JANUS DEFINE#type\|WEBSERV]]</var> port and an <var>ON SSLNOCERTERR</var> clause is part of the port definition.		<li>Processing continues to run the <var>[[JANUS WEB exception rules#sslnocerterr\|SSLNOCERTERR]]</var> exception handler, if this is a <var>[[JANUS DEFINE#type\|WEBSERV]]</var> port and an <var>ON SSLNOCERTERR</var> clause is part of the port definition.
	</ul>		</ul>
	</ul>		</ul>
Line 23:		Line 23:
	Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.		Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.

	The following example shows a web server SSL port definition that specifies the <var>SSLCLCERTR</var> parameter, JANUS ADDCA commands that are needed to store CA-signed certificates to authenticate the client certificate, and a rule that specifies the <var>~~[[ONSSLCERTERR]]~~</var> exception handler for cases where the client does not present a certificate:		The following example shows a web server SSL port definition that specifies the <var>SSLCLCERTR</var> parameter, JANUS ADDCA commands that are needed to store CA-signed certificates to authenticate the client certificate, and a rule that specifies the <var>SSLNOCERTERR</var> exception handler for cases where the client does not present a certificate:

	<p class="code">JANUS DEFINE CLCERTWEB 9733 WEBSERV 10 HTTPVERSION 1.1 -		<p class="code">JANUS DEFINE CLCERTWEB 9733 WEBSERV 10 HTTPVERSION 1.1 -

JALWiccan: Automatically generated page update

2013-04-16T22:24:08Z

Automatically generated page update

← Older revision		Revision as of 22:24, 16 April 2013
Line 1:		Line 1:
	<span class="pageSubtitle"~~><section begin="desc" /~~>Request certificate from client~~<section end="desc" />~~</span>		<span class="pageSubtitle">Request certificate from client</span>

	<var>SSLCLCERT</var> and <var>SSLCLCERTR</var> are parameters on <var>[[JANUS DEFINE]]</var>, which define and sets characteristics of a Janus port.		<var>SSLCLCERT</var> and <var>SSLCLCERTR</var> are parameters on <var>[[JANUS DEFINE]]</var>, which define and sets characteristics of a Janus port.

JAL2 at 21:46, 1 March 2012

2012-03-01T21:46:10Z

← Older revision		Revision as of 21:46, 1 March 2012
Line 23:		Line 23:
	Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.		Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.

	The following example shows a web server SSL port definition that specifies the <var>SSLCLCERTR</var> parameter, JANUS ADDCA commands that are needed to store CA-signed certificates to authenticate the client certificate, and a rule that specifies the ONSSLCERTERR exception handler for cases where the client does not present a certificate:		The following example shows a web server SSL port definition that specifies the <var>SSLCLCERTR</var> parameter, JANUS ADDCA commands that are needed to store CA-signed certificates to authenticate the client certificate, and a rule that specifies the <var>[[ONSSLCERTERR]]</var> exception handler for cases where the client does not present a certificate:

	<p class="code">JANUS DEFINE CLCERTWEB 9733 WEBSERV 10 HTTPVERSION 1.1 -		<p class="code">JANUS DEFINE CLCERTWEB 9733 WEBSERV 10 HTTPVERSION 1.1 -

JALWiccan: 1 revision

2012-03-01T21:45:24Z

1 revision

← Older revision	Revision as of 21:45, 1 March 2012
(No difference)

JALWiccan: 1 revision

2012-03-01T21:45:23Z

1 revision

← Older revision		Revision as of 21:45, 1 March 2012
Line 19:		Line 19:
	To verify a certificate that is passed by a client, you must first have added to the port one or more CA-signed certificates by using the <var>[[JANUS ADDCA]]</var> command.		To verify a certificate that is passed by a client, you must first have added to the port one or more CA-signed certificates by using the <var>[[JANUS ADDCA]]</var> command.

	When a client presents a certificate, that certificate is available to <var class="product">User Language</var> code via <var>[[$Web_Cert_Levels]]</var> and <var>[[$Web_Cert_Info]]</var> on <var>WEBSERV</var> ports, and it is available via $~~SOCK_CERT_LEVELS~~ and <var>[[$Sock_Cert_Info]]</var> on <var>[[JANUS DEFINE#type\|SRVSOCK]]</var> ports.		When a client presents a certificate, that certificate is available to <var class="product">User Language</var> code via <var>[[$Web_Cert_Levels]]</var> and <var>[[$Web_Cert_Info]]</var> on <var>WEBSERV</var> ports, and it is available via <var>[[$Sock_Cert_Levels]]</var> and <var>[[$Sock_Cert_Info]]</var> on <var>[[JANUS DEFINE#type\|SRVSOCK]]</var> ports.

	Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.		Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.

JALWiccan: 1 revision

2012-03-01T21:44:24Z

1 revision

← Older revision	Revision as of 21:44, 1 March 2012
(No difference)

JAL2 at 21:44, 1 March 2012

2012-03-01T21:44:23Z

← Older revision		Revision as of 21:44, 1 March 2012
Line 19:		Line 19:
	To verify a certificate that is passed by a client, you must first have added to the port one or more CA-signed certificates by using the <var>[[JANUS ADDCA]]</var> command.		To verify a certificate that is passed by a client, you must first have added to the port one or more CA-signed certificates by using the <var>[[JANUS ADDCA]]</var> command.

	When a client presents a certificate, that certificate is available to <var class="product">User Language</var> code via <var>[[$Web_Cert_Levels]]</var> and <var>[[$Web_Cert_Info]]</var> on <var>WEBSERV</var> ports, and it is available via $SOCK_CERT_LEVELS and $~~SOCK_CERT_INFO~~ on <var>[[JANUS DEFINE#type\|SRVSOCK]]</var> ports.		When a client presents a certificate, that certificate is available to <var class="product">User Language</var> code via <var>[[$Web_Cert_Levels]]</var> and <var>[[$Web_Cert_Info]]</var> on <var>WEBSERV</var> ports, and it is available via $SOCK_CERT_LEVELS and <var>[[$Sock_Cert_Info]]</var> on <var>[[JANUS DEFINE#type\|SRVSOCK]]</var> ports.

	Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.		Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.

JAL2 at 21:35, 1 March 2012

2012-03-01T21:35:30Z

← Older revision		Revision as of 21:35, 1 March 2012
Line 19:		Line 19:
	To verify a certificate that is passed by a client, you must first have added to the port one or more CA-signed certificates by using the <var>[[JANUS ADDCA]]</var> command.		To verify a certificate that is passed by a client, you must first have added to the port one or more CA-signed certificates by using the <var>[[JANUS ADDCA]]</var> command.

	When a client presents a certificate, that certificate is available to <var class="product">User Language</var> code via [[$Web_Cert_Levels]] and [[$Web_Cert_Info]] on <var>WEBSERV</var> ports, and it is available via $SOCK_CERT_LEVELS and $SOCK_CERT_INFO on <var>[[JANUS DEFINE#type\|SRVSOCK]]</var> ports.		When a client presents a certificate, that certificate is available to <var class="product">User Language</var> code via <var>[[$Web_Cert_Levels]]</var> and <var>[[$Web_Cert_Info]]</var> on <var>WEBSERV</var> ports, and it is available via $SOCK_CERT_LEVELS and $SOCK_CERT_INFO on <var>[[JANUS DEFINE#type\|SRVSOCK]]</var> ports.

	Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.		Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.

JAL2 at 21:34, 1 March 2012

2012-03-01T21:34:22Z

← Older revision		Revision as of 21:34, 1 March 2012
Line 36:		Line 36:
	</p>		</p>

	<var>SSLCLCERT</var> and <var>SSLCLCERTR</var> are valid for <var>[[JANUS DEFINE#type\|SRVSOCK]]</var>, <var>[[JANUS DEFINE#type\|WEBSERV]]</var>, OPENSERV and <var>[[JANUS DEFINE#type\|SDS]]</var> port types.		<var>SSLCLCERT</var> and <var>SSLCLCERTR</var> are valid for <var>[[JANUS DEFINE#type\|SRVSOCK]]</var>, <var>[[JANUS DEFINE#type\|WEBSERV]]</var>, <var>[[JANUS DEFINE#type\|OPENSERV]]</var>, and <var>[[JANUS DEFINE#type\|SDS]]</var> port types.

	==See also==		==See also==

← Older revision		Revision as of 23:36, 7 June 2016
Line 1:		Line 1:
			{{DISPLAYTITLE: SSLCLCERT and SSLCLCERTR}}
	<span class="pageSubtitle">Request certificate from client</span>		<span class="pageSubtitle">Request certificate from client</span>

	<var>SSLCLCERT</var> and <var>SSLCLCERTR</var> are parameters on <var>[[JANUS DEFINE]]</var>, which define and sets characteristics of a Janus port.		<var>SSLCLCERT</var> and <var>SSLCLCERTR</var> are parameters on <var>[[JANUS DEFINE]]</var>, which define and sets characteristics of a Janus port.

	These parameters specify that an SSL server port will request an SSL certificate from the client. An SSL port is a Janus port whose definition includes an <var>[[SSL (JANUS DEFINE parameter)\|SSL]]</var> parameter, which indicates that communications on this port may be encrypted using <var class="product">[~~http://sirius-software.com/maint/download/jansslr.pdf~~ Janus Network Security]</var> SSL (Secure Sockets Layer) or TLS (Transport Layer Security) support.		These parameters specify that an SSL server port will request an SSL certificate from the client. An SSL port is a Janus port whose definition includes an <var>[[SSL (JANUS DEFINE parameter)\|SSL]]</var> parameter, which indicates that communications on this port may be encrypted using <var class="product">[[Janus Network Security]]</var> SSL (Secure Sockets Layer) or TLS (Transport Layer Security) support.

	If the client does '''not''' present a certificate when requested:		If the client does '''not''' present a certificate when requested:

	<ul>		<ul>
	<li><var>SSLCLCERT</var> specifies that normal processing should continue.		<li><var>SSLCLCERT</var> specifies that normal processing should continue.

	<li><var>SSLCLCERTR</var> specifies either of the following:		<li><var>SSLCLCERTR</var> specifies either of the following:

Line 19:		Line 20:
	To verify a certificate that is passed by a client, you must first have added to the port one or more CA-signed certificates by using the <var>[[JANUS ADDCA]]</var> command.		To verify a certificate that is passed by a client, you must first have added to the port one or more CA-signed certificates by using the <var>[[JANUS ADDCA]]</var> command.

	When a client presents a certificate, that certificate is available to <var class="product">~~User Language~~</var> code via <var>[[$Web_Cert_Levels]]</var> and <var>[[$Web_Cert_Info]]</var> on <var>WEBSERV</var> ports, and it is available via <var>[[$Sock_Cert_Levels]]</var> and <var>[[$Sock_Cert_Info]]</var> on <var>[[JANUS DEFINE#type\|SRVSOCK]]</var> ports.		When a client presents a certificate, that certificate is available to <var class="product">SOUL</var> code via <var>[[$Web_Cert_Levels]]</var> and <var>[[$Web_Cert_Info]]</var> on <var>WEBSERV</var> ports, and it is available via <var>[[$Sock_Cert_Levels]]</var> and <var>[[$Sock_Cert_Info]]</var> on <var>[[JANUS DEFINE#type\|SRVSOCK]]</var> ports.

	Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.		Client certificate information can be used to perform trusted logins in <var>[[NEWSESCMD (JANUS DEFINE parameter)\|NEWSESCMD]]</var> programs.

	The following example shows a web server SSL port definition that specifies the <var>SSLCLCERTR</var> parameter, JANUS ADDCA commands that are needed to store CA-signed certificates to authenticate the client certificate, and a rule that specifies the <var>SSLNOCERTERR</var> exception handler for cases where the client does not present a certificate:		The following example shows a web server SSL port definition that specifies the <var>SSLCLCERTR</var> parameter, <var>[[JANUS ADDCA]]</var> commands that are needed to store CA-signed certificates to authenticate the client certificate, and a rule that specifies the <var>SSLNOCERTERR</var> exception handler for cases where the client does not present a certificate:

	<p class="code">JANUS DEFINE CLCERTWEB 9733 WEBSERV 10 HTTPVERSION 1.1 -		<p class="code">JANUS DEFINE CLCERTWEB 9733 WEBSERV 10 HTTPVERSION 1.1 -