| Stephan Schwarzer 2004-01-19, 8:21 am |
| Hi all,
We configured WPS to use Form Based Authentication, where the login form
is protected by SSL. To enable Client Certificate Authentication in
parallel, we setup IBM HTTP Server 1.3.19.1 for Client Certificate
Authentication and implemented a TAI for WAS to read the certificate
information from the HTTP request and return the DN from the certificate
as username to WAS.
According to J2EE Servlet Specification we expect the certificate to be
accessible via the attribute "javax.servlet.request.X509Certificate" of
the HTTP request but this contains null only.
To check WAS we implemented a simple servlet that shows all header
fields and attribute of the HTTP request but we cannot find the required
attribute there too.
What will I have to do in order to access a clients certificate in WAS?
Stephan
|