x509 - Spring x.509 authentication only for certain port -


i have following scenario in spring app:

  • all connections port 8440 have one-side https authentication (only server authenticated)
  • all connections port 8441 have two-size http authentication (so client must provide valid x.509 cert)

how can configure spring-security.xml file achieve this? ideally, i'd able express this:

<http port=8441 use-expressions="true">   <http-basic entry-point-ref="ambarientrypoint" />   <intercept-url pattern="/**" access="permitall()" method="get"/>   <intercept-url pattern="/**" access="hasrole('admin')" method="delete"/>   <x509 subject-principal-regex="(.*)" /> </http> <http port=8440 use-expressions="true">   <http-basic entry-point-ref="ambarientrypoint" />   <intercept-url pattern="/**" access="permitall()" /> </http> 

is way accomplish this?

unfortunately, can not spring security. client authentication performed servlet container (or webserver behind it). can configure 2 different web applications. need configure servlet container client certificate authentication first application , ssl second application. spring security allow take client certificate information using <x509> filter


Comments

Popular posts from this blog

c# - Operator '==' incompatible with operand types 'Guid' and 'Guid' using DynamicExpression.ParseLambda<T, bool> -