We tried the same thing six months ago (october 1999) with different
engines such as Sun's Java Web Server 2.0, New Atlanta's
Servlet Exec 2.2 or JRun 2.3.3. The last two engines were used in standalone
mode or coupled with native web-servers such as
Netscape Enterprise Server 3.6, Apache 1.3.6 or Microsoft Personal
Web Server.
More exactly, I tried the following code : "X509Certificate certChain[]
= (X509Certificate[])
req.getAttribute("javax.net.ssl.peer_certificates");" to get the certificates
chain.
Like for you, we got the same results : this code worked well for the
Java Web Server 2.0, but didn't work for the other engines
(Netscape Enterprise Server 3.6 calling into JRun included). From JRun,
I had no response to the message I posted on the JRun
Conference. Paul Bonfanti from New Atlanta responded to me : "ServletExec
won't support this until the next release which is not
due out until sometime in early 2000". Gregg Orangio from New Atlanta
added "We are working on this feature now and would
like to have some customers beta test it with us in the coming weeks."
That's all right now. We have left that problem behind us for the moment
because of priority changes. I've seen in different
mailing-lists that there are some possibilities with the headers for
IIS and Netscape : see
http://www.allaire.com/Handlers/index.cfm?ID=12067&Method=Full
or
http://www2.allaire.com/Handlers/index.cfm?ID=12068&Method=Full
Hope this will help !
Christian
Mark Wutka a écrit :
Zeljko-=========================================================================== To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST". Some relevant FAQs on JSP/Servlets can be found at: http://java.sun.com/products/jsp/faq.html http://www.esperanto.org.nz/jsp/jspfaq.html http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
According to the documentation for the servlet API, you should be able
to get the client certificate from the request object like this:X509Certificate cert = (X509Certificate) request.getAttribute(
"javax.servlet.request.X509Certificate");I have seen this work under Java Web Server, and I have found that it does
not work under Netscape Enterprise Server 3.6 calling into JRun. I'd love
to hear of other cases where it does work.
Mark===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
Some relevant FAQs on JSP/Servlets can be found at:http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
