gwt - Spring Security X.509 Preauth -
i'm using spring security 2.x's preauthentication x.509 certificates.
i certificatetext
via httpservletrequest.getattribute("certificate")
.
sometimes, above call returns ""
(empty). believe occurs when http session has expired.
what explain why httpservletrequest.getattribute("cert")
returns empty?
edit in kerberos, example, ticket available in every http request. cert not in x.509 http requests?
- please access certificate using code:
x509certificate[] certs = (x509certificate[]) request.getattribute("javax.servlet.request.x509certificate");
- certificate populated request after successful client certificate authentication.
ensure support long certificate chain:
add max_packet_size propery worker.properties file
worker.ajp13w.max_packet_size=65536
add packetsize propery configuration of ajp connector in tomcat configuration \conf\server.xml
<connector port="8089" enablelookups="false" redirectport="8443" protocol="ajp/1.3" packetsize="65536"/>
apache logs: http://httpd.apache.org/docs/2.2/logs.html#accesslog http://httpd.apache.org/docs/2.2/logs.html#errorlog http://httpd.apache.org/docs/2.2/mod/core.html#loglevel
Comments
Post a Comment