X509 authn under Jetty

[Ian Bobbitt]

Hi,

I'm looking at getting X509 authn working in IdP 3.2.1 under Jetty 9.3.

I have a proof of concept working by setting NeedClientAuth and TrustStorePath/TrustStorePassword, but it requires a
client cert for any communication. I'd like to have a client cert only required for /idp/Authn/X509 so I can display
instructions, setup links, etc. at the splash screen before redirecting. Is that possible with Jetty?

Back in April, Scott said "I have examples lying around of using client TLS on the front-channel with Jetty, but it was
brutally confusing." <http://shibboleth.net/pipermail/users/2016-April/028584.html>. Are those examples available somewhere?

-- Ian