gwt - Spring Security X.509 Preauth -


i'm using spring security 2.x's preauthentication x.509 certificates.

i certificatetext via httpservletrequest.getattribute("certificate").

sometimes, above call returns "" (empty). believe occurs when http session has expired.

what explain why httpservletrequest.getattribute("cert") returns empty?

edit in kerberos, example, ticket available in every http request. cert not in x.509 http requests?

  1. please access certificate using code: x509certificate[] certs = (x509certificate[]) request.getattribute("javax.servlet.request.x509certificate");
  2. certificate populated request after successful client certificate authentication.

ensure support long certificate chain:

  1. add max_packet_size propery worker.properties file worker.ajp13w.max_packet_size=65536

  2. add packetsize propery configuration of ajp connector in tomcat configuration \conf\server.xml <connector port="8089" enablelookups="false" redirectport="8443" protocol="ajp/1.3" packetsize="65536"/>

apache logs: http://httpd.apache.org/docs/2.2/logs.html#accesslog http://httpd.apache.org/docs/2.2/logs.html#errorlog http://httpd.apache.org/docs/2.2/mod/core.html#loglevel


Comments

Popular posts from this blog

linux - xterm copying to CLIPBOARD using copy-selection causes automatic updating of CLIPBOARD upon mouse selection -

c++ - qgraphicsview horizontal scrolling always has a vertical delta -