Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 356786

Summary: support for certificate-based login
Product: z_Archived Reporter: Sascha Scholz <sascha.scholz>
Component: MylynAssignee: Steffen Pingel <steffen.pingel>
Status: RESOLVED FIXED QA Contact:
Severity: enhancement    
Priority: P3 Keywords: noteworthy
Version: unspecified   
Target Milestone: 0.9   
Hardware: All   
OS: All   
Whiteboard:
Bug Depends on: 367493    
Bug Blocks:    
Attachments:
Description Flags
mylyn/context/zip
none
screenshot none

Description Sascha Scholz CLA 2011-09-06 05:49:34 EDT
Our Jenkins is running on Tomcat with certificate-based authentication. This isn't supported in the Builds connector yet.
Comment 1 Steffen Pingel CLA 2011-09-09 15:27:56 EDT
Sounds like a good idea. We already have certificate authentication support for Trac so we should be able to reuse some of that for the Hudson connector.
Comment 2 Steffen Pingel CLA 2012-01-14 15:57:17 EST
I have enabled certificate authentication support for Hudson: A key store can now be configured in a new section on the Hudson server properties page.

I noticed tests failing when run under Java 6 against the test server on mylyn.org. Weirdly tests work when run on Java 5 which make me suspicious whether this is an incompatibility between the Java version and the Apache server configuration. 

Sascha, it would be great if you could try the next weekly build and reopen this bug if doesn't work for you.
Comment 3 Steffen Pingel CLA 2012-01-14 15:57:20 EST
Created attachment 209499 [details]
mylyn/context/zip
Comment 4 Steffen Pingel CLA 2012-01-14 19:13:56 EST
Created attachment 209500 [details]
screenshot
Comment 5 Steffen Pingel CLA 2012-01-25 11:50:36 EST
I noticed the following while testing with various JVMs:

Java 1.5.0_22: If Hudson is running behind a reverse Apache proxy the following flag needs to be set in the Apache configuration: SSLInsecureRenegotiation on
Java 1.6.0_20: Connections fail with an SSLHandshakeException: renegotiation is not allowed regardless of the Apache configuration
Java 1.6.0_26, Java 1.7.0_2: Certificate authentication works regardless of the Apache configuration