Add authentication mechanism for CLIENT-CERT

[gergelymolnarpro]

The medium or the big companies have custom certificate system and I think the intermediate certificate as group at client authentication or programmatically trusted certificate makes sense.

[arjantijms]

A CERT authentication mechanism is high on the list of priorities, not in the least to make sure Jakarta Security's authentication mechanisms can be a full drop-in replacement for the Servlet ones.

[arjantijms]

Jakarta Security 2.0 provides support for the authentication mechanisms that were originally defined in Servlet, namely FORM and BASIC. Servlet defines two additional mechanisms: DIGEST and CLIENT-CERT. These had not been implemented due to time constraints.

For completeness CLIENT-CERT should be added to Jakarta Security as well.

[arjantijms]

Again nobody had time for this. Removing from 3.0 milestone.