TLS session renegotiation in java

Hi,

   just a note that I put together a mini server in the git repository 

   https://github.com/bblfish/TLS_test

   that tests TLS session renegotiation, to see how browsers react to that.
I wanted to see:

  - if when renegotiating browsers ask their users for a new certificate (they don't seem to - so this may be a bug in my code , the server, or a bug in the browsers)
  - to see how this can be done in java
  - to improve html users login experience, so that when they reach a site they don't get asked immediately for a certificate but only once they have been able to look around a bit
  - which browsers support the TLS rengotiation fix

   The code requires the http://www.restlet.org/ server, the latest development branch of which can be found here

 http://restlet.tigris.org/svn/restlet/trunk

 ( there are only two modules there that need to be compiled as specified in the pom of the session_renegotiation project )

Henry

Social Web Architect
http://bblfish.net/

Received on Monday, 10 October 2011 08:01:35 UTC