I'm trying to establish mutual authentication between my Tomcat server and my customer's firewall.
The server certificate we have is from Digicert (Root CA) and RapidSSL (intermediate).
The certificate chain in the
ServerHello block is from QuoVadis.
But before the
ServerHelloDone line, the
Cert Authorities are empty:
*** CertificateRequest Cert Types: RSA, DSS, ECDSA Supported Signature Algorithms: SHA256withRSA, SHA256withDSA, SHA256withECDSA, SHA384withRSA, Unknown (hash:0x5, signature:0x2), SHA384withECDSA, SHA512withRSA, Unknown (hash:0x6, signature:0x2), SHA512withECDSA, SHA1withRSA, SHA1withDSA, SHA1withECDSA Cert Authorities: <Empty> ajp-line-1, READ: TLSv1.2 Handshake, length = 4 *** ServerHelloDone Warning: no suitable certificate found - continuing without client authentication *** Certificate chain <Empty>
I'm going by the documentation here - https://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/ReadDebug.html
Should RapidSSL / Digicert be available in the
Cert Authorities block for the client auth to continue?