users@jax-rpc.java.net

Re: HTTPS Authentication

From: Bernardo Diaz Arias <bdiaz_at_SHD.GOV.CO>
Date: Tue, 11 Mar 2003 07:19:50 -0500

Risto,

I hope this could be useful,


http://www.informit.com/isapi/product_id~%7BF82CA1AF-7167-434D-9D6C-23A8D458
38E7%7D/content/index.asp

http://www-106.ibm.com/developerworks/webservices/library/ws-sec1.html


Bernardo D?az
Colombia

 -----Mensaje original-----
De: Risto Reinp?ld [mailto:Risto.Reinpold_at_MICROLINK.EE]
Enviado el: Martes 11 de Marzo de 2003 06:55 AM
Para: JAXRPC-INTEREST_at_JAVA.SUN.COM
Asunto: HTTPS Authentication

Hello All,

I want to use HTTPS Client authentication, but I have no idea how can I
obtain client's certificate at the servlet endpoint. The Web container
stores certificates in ServletRequest with attribute
"javax.servlet.request.X509Certificate", but ServletEndpointContext does not
have methods to access the ServletRequest object. I could obtain the
ServletRequest object by casting ServletEndpointContext to
com.sun.xml.rpc.server.http.ServletEndpointContextImpl, but I do not want
tie my code to one implementation. Does anybody have a better solution to
this problem?

Thanks,

Risto Reinp?ld