Bug 356786 - support for certificate-based login
Summary: support for certificate-based login
Status: RESOLVED FIXED
Alias: None
Product: z_Archived
Classification: Eclipse Foundation
Component: Mylyn (show other bugs)
Version: unspecified   Edit
Hardware: All All
: P3 enhancement (vote)
Target Milestone: 0.9   Edit
Assignee: Steffen Pingel CLA
QA Contact:
URL:
Whiteboard:
Keywords: noteworthy
Depends on: 367493
Blocks:
  Show dependency tree
 
Reported: 2011-09-06 05:49 EDT by Sascha Scholz CLA
Modified: 2012-01-25 11:50 EST (History)
0 users

See Also:


Attachments
mylyn/context/zip (5.37 KB, application/octet-stream)
2012-01-14 15:57 EST, Steffen Pingel CLA
no flags Details
screenshot (6.58 KB, image/png)
2012-01-14 19:13 EST, Steffen Pingel CLA
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Sascha Scholz CLA 2011-09-06 05:49:34 EDT
Our Jenkins is running on Tomcat with certificate-based authentication. This isn't supported in the Builds connector yet.
Comment 1 Steffen Pingel CLA 2011-09-09 15:27:56 EDT
Sounds like a good idea. We already have certificate authentication support for Trac so we should be able to reuse some of that for the Hudson connector.
Comment 2 Steffen Pingel CLA 2012-01-14 15:57:17 EST
I have enabled certificate authentication support for Hudson: A key store can now be configured in a new section on the Hudson server properties page.

I noticed tests failing when run under Java 6 against the test server on mylyn.org. Weirdly tests work when run on Java 5 which make me suspicious whether this is an incompatibility between the Java version and the Apache server configuration. 

Sascha, it would be great if you could try the next weekly build and reopen this bug if doesn't work for you.
Comment 3 Steffen Pingel CLA 2012-01-14 15:57:20 EST
Created attachment 209499 [details]
mylyn/context/zip
Comment 4 Steffen Pingel CLA 2012-01-14 19:13:56 EST
Created attachment 209500 [details]
screenshot
Comment 5 Steffen Pingel CLA 2012-01-25 11:50:36 EST
I noticed the following while testing with various JVMs:

Java 1.5.0_22: If Hudson is running behind a reverse Apache proxy the following flag needs to be set in the Apache configuration: SSLInsecureRenegotiation on
Java 1.6.0_20: Connections fail with an SSLHandshakeException: renegotiation is not allowed regardless of the Apache configuration
Java 1.6.0_26, Java 1.7.0_2: Certificate authentication works regardless of the Apache configuration