# Setting up WSE for SSL Client Authentication?

**URL:** https://community.wowza.com/t/setting-up-wse-for-ssl-client-authentication/54702
**Category:** Wowza Streaming Engine
**Created:** [February 24, 2020, 9:08pm UTC](https://community.wowza.com/t/setting-up-wse-for-ssl-client-authentication/54702 "2020-02-24T21:08:26Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Rich\_Sokol](https://avatars.discourse-cdn.com/v4/letter/r/d78d45/32.png) [@Rich\_Sokol](https://community.wowza.com/u/Rich_Sokol)
#### Post date: [February 24, 2020, 9:08pm UTC](https://community.wowza.com/t/setting-up-wse-for-ssl-client-authentication/54702/1 "2020-02-24T21:08:26Z")

</div>

We need to be able to access a users client certificate information when a stream is requested to be able to authenticate/authorize the user via a custom modaul we have implemented. Does anyone first know how to configure WSE to require client authentication? And then, can we access the certificate information via the Java X509Certificate class?

---

<div class="post-metadata">

### Author: ![Rose\_Power-Wowza\_Com](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/rose_power-wowza_com/32/431_2.png) [@Rose\_Power-Wowza\_Com](https://community.wowza.com/u/Rose_Power-Wowza_Com)
#### Post date: [February 24, 2020, 10:04pm UTC](https://community.wowza.com/t/setting-up-wse-for-ssl-client-authentication/54702/2 "2020-02-24T22:04:10Z")

</div>

Checking for you…

---

<div class="post-metadata">

### Author: ![Rose\_Power-Wowza\_Com](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/rose_power-wowza_com/32/431_2.png) [@Rose\_Power-Wowza\_Com](https://community.wowza.com/u/Rose_Power-Wowza_Com)
#### Post date: [February 24, 2020, 11:27pm UTC](https://community.wowza.com/t/setting-up-wse-for-ssl-client-authentication/54702/3 "2020-02-24T23:27:46Z")

</div>

This is not an easy thing to set up according to the engineers and unfortunately not something we currently have support for, but you may be able to have it built.

Feel free to check out our Pro Services division where we can discuss building custom configurations. You can also try posting here in the [Hire A Consultant forum.](https://www.wowza.com/community/spaces/26/find-a-consultant.html)

---

<div class="post-metadata">

### Author: ![Rich\_Sokol](https://avatars.discourse-cdn.com/v4/letter/r/d78d45/32.png) [@Rich\_Sokol](https://community.wowza.com/u/Rich_Sokol)
#### Post date: [March 2, 2020, 6:20pm UTC](https://community.wowza.com/t/setting-up-wse-for-ssl-client-authentication/54702/4 "2020-03-02T18:20:15Z")

</div>

Thanks @Rose Power-Wowza Community Manager, we have came up with our answer. Using Nginx to proxy, it grabs the incoming client certificate for stream request, creates needed header vars that are accessed in WSE module. We make web service call from module that contains the WSE server cert for auth handshake and the requesting users identity, all over SSL point to point. We would like to be able to access the WSE token for the requested stream in the module as well. We can see it in the logs, and therefore assume it is accessible via a class or function? Sooo close…
