x509 - Spring x.509 authentication only for certain port -
i have following scenario in spring app:
- all connections port 8440 have one-side https authentication (only server authenticated)
- all connections port 8441 have two-size http authentication (so client must provide valid x.509 cert)
how can configure spring-security.xml file achieve this? ideally, i'd able express this:
<http port=8441 use-expressions="true"> <http-basic entry-point-ref="ambarientrypoint" /> <intercept-url pattern="/**" access="permitall()" method="get"/> <intercept-url pattern="/**" access="hasrole('admin')" method="delete"/> <x509 subject-principal-regex="(.*)" /> </http> <http port=8440 use-expressions="true"> <http-basic entry-point-ref="ambarientrypoint" /> <intercept-url pattern="/**" access="permitall()" /> </http> is way accomplish this?
unfortunately, can not spring security. client authentication performed servlet container (or webserver behind it). can configure 2 different web applications. need configure servlet container client certificate authentication first application , ssl second application. spring security allow take client certificate information using <x509> filter
Comments
Post a Comment