webtier@glassfish.java.net

Re: Session Tracking Mechanisms // Binding SSL Session to HttpSession

From: Shing Wai Chan <shing.wai.chan_at_oracle.com>
Date: Wed, 06 Apr 2011 10:44:06 -0700

I do not see CoyoteRequest in v3.0.1.
But in the valve, you can call request.setRequestedSessionId(cid)
in this case.
Regards,
      Shing Wai Chan

On 4/6/11 2:59 AM, Markus Eisele wrote:
> Hi all,
>
> I am trying to assign an SSL Session Id as the WebContainer HTTPSession Id.
> There are a couple of posts around suggesting to use a import
> org.apache.catalina.Valve implementation.
> (compare Jan's post here http://blogs.sun.com/jluehe/date/200712 and
> this forum discussion http://forums.java.net/node/676577 )
> BUT ... I am not able to find a suitable replacement for:
>
> ...
> CoyoteRequest coyoReq = (CoyoteRequest) request;
> coyoReq.setRequestedSessionId(cid);
> ...
>
> what seems to have worked with v2 / v3 and doesn't with 3.1
>
> I am able to get the SSL Session ID with my Custom Valve:
>
> Integer cidsize =
> (Integer)request.getAttribute("javax.servlet.request.key_size"); //
> first
> String cid = (String)request.getAttribute("javax.servlet.request.ssl_session");
> // get the SSL Session
>
> Thanks for any hints!
>
> Rgds
> Markus