Click to See Complete Forum and Search --> : client authentication dilemma


funwithdolphin
November 6th, 2006, 03:58 AM
I am trying to implement client authentication for SSL.

There is a service(JService) to which a client (JClient) can connect through SSL. So identities are used while connecting the JClient to JServer.

Now I want to connect JServer to another different Service(JOtherService).
So I want to implement client authentication for JServer to connect to JOtherService through SSL.

So if I want to implement client authentication for JService, then can we use the same identities that we used (to connect JClient to JService) for connecting JService to JOtherService. I mean can we use same identities for client and server?

Can anyone help me in this regard??

funwithdolphin
November 6th, 2006, 05:15 AM
I also have one more question here.

In case of SSL, if a particular application is acting as both client and a server, then can we share the same certificate for client and server ?

PeejAvery
November 6th, 2006, 09:28 AM
In case of SSL, if a particular application is acting as both client and a server, then can we share the same certificate for client and server ?
Of course. There is no reason why they cannot.

funwithdolphin
November 7th, 2006, 01:55 AM
Thanks for the reply.
But one more querry regarding this.

Can we use the client certificate on one machine as the client certificate on another machine?
Does the client certificate depend on the machine as well?
Because if the client certificate is machine-specific, then we will not be able to use it on other machine.

PeejAvery
November 7th, 2006, 09:02 AM
No. A certificate is not client dependent.