users@glassfish.java.net

[gf-users] Mutual Auth with Certs doesn't work

From: Andreas Junius <andreas.junius_at_gmail.com>
Date: Wed, 08 Oct 2014 08:07:14 +1030

Hi All,

I've got a little test web application that requires a client
certificate. This application works fine in GF 4.0 and GF 3.2, however
it stopped working with GF 4.1. The log contains the following entry:

[2014-10-08T07:57:23.636+1030] [glassfish 4.0] [INFO] []
[javax.enterprise.system.core.security] [tid: _ThreadID=20
_ThreadName=http-listener-1(1)] [timeMillis: 1412717243636] [levelValue:
800] [[
   JACC Policy Provider: Failed Permission Check,
context(TestRestServer/TestRestServer)-
permission(("javax.security.jacc.WebUserDataPermission" "/mutual" "GET"))]]

It says "GF 4.0", but it is actually 4.1. Is anyone able to make sense
of this message? The browser did not ask me to provide a client
certificate, the connection fails immediately.

Cheers,
Andy