Re: Problems using AuthSSLProtocolSocketFactory to send ClientCertificate in HTTPS session handshake

2004-09-26 Thread Oleg Kalnichevski
 My belief at this point is that Oracle is only sending the client
 certificate to browser (IE) based clients. That would explain the problem. I
 have created an Oracle TAR, to see if this is an Oracle problem.
 

Dale,
This assumption can be easily tested. The only way the target web server
can tell IE from other agents is by the User-Agent request header.

Try setting the user agent header to something like that and see if that
makes any difference.

GetMethod httpget = new GetMethod(/);
httpget.setRequestHeader(User-Agent, 
 Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0));

This can also be a problem with the Sum implementation of JSSE, which
for whatever reason ignores the client certificate request issued by the
Oracle single signon server. Consider trying alternative JSSE
implementations such as IBM JSSE or IAIK iSaSiLk. Likewise, it may also
be a bug in the Oracle SSL library. Do you know exactly what SSL
implementation Oracle single signon server employs? It is based on
OpenSSL or some proprietary stuff? 

Hope this helps

Oleg




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 14036] - MultipartPostMethod does not check for error messages

2004-09-26 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=14036.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=14036

MultipartPostMethod does not check for error messages





--- Additional Comments From [EMAIL PROTECTED]  2004-09-26 15:24 ---
Created an attachment (id=12868)
Patch (take 1)

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



DO NOT REPLY [Bug 14036] - MultipartPostMethod does not check for error messages

2004-09-26 Thread bugzilla
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
http://issues.apache.org/bugzilla/show_bug.cgi?id=14036.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=14036

MultipartPostMethod does not check for error messages

[EMAIL PROTECTED] changed:

   What|Removed |Added

 Status|NEW |ASSIGNED



--- Additional Comments From [EMAIL PROTECTED]  2004-09-26 15:28 ---
Folks, here's the first stab at it. I am not entirely sure it is actually worth
the trouble. Please let me know how you feel about it. Should we decide to go
ahead with this patch, I'll happily provide all the missing bits (test cases,
javadocs, etc).

Oleg

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]