I currently work on an application that we are investigating adding support for authenticating users using DoD CAC cards.
Our application has a .NET Winform frontend and a Tomcat webserver that utilizes Apache Axis Web Services on the backend.
I was wondering if someone has implemented something similar in the past, or could give me some pointers on where I can find some usefull information.
I am interested in the following:
1. How to get my .NET winform client to obtain the certificate in the CAC card to provide to the server
2. On the tomcat server, how do obtain the identity of the user passing the certificate.