Following an example from Hall's More Servlets book, I had attempted extracting a cert from a HTTP request using the following:
X509Certificate cert = (X509Certificate)req.getAttribute("javax.servlet.request.X509Certificate"); which generated a difficult to debug class cast exception. The answer (thanks to a post from John Brayton) is of course that you need a cert array instead, eg: X509Certificate []certAr = (X509Certificate [])req.getAttribute("javax.servlet.request.X509Certificate"); I am submitting this as a follow up to Mr. Brayton's post so that others can locate the problem quicker. Regards, Eric Gilbertson [EMAIL PROTECTED] -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>