We tried the same thing six months ago (october 1999) with different engines such as Sun's Java Web Server 2.0, New Atlanta's Servlet Exec 2.2 or JRun 2.3.3. The last two engines were used in standalone mode or coupled with native web-servers such as Netscape Enterprise Server 3.6, Apache 1.3.6 or Microsoft Personal Web Server.
More exactly, I tried the following code : "X509Certificate certChain[] = (X509Certificate[]) req.getAttribute("javax.net.ssl.peer_certificates");" to get the certificates chain.
Like for you, we got the same results : this code worked well for the Java Web Server 2.0, but didn't work for the other engines (Netscape Enterprise Server 3.6 calling into JRun included). From JRun, I had no response to the message I posted on the JRun Conference. Paul Bonfanti from New Atlanta responded to me : "ServletExec won't support this until the next release which is not due out until sometime in early 2000". Gregg Orangio from New Atlanta added "We are working on this feature now and would like to have some customers beta test it with us in the coming weeks."
That's all right now. We have left that problem behind us for the moment because of priority changes. I've seen in different mailing-lists that there are some possibilities with the headers for IIS and Netscape : see http://www.allaire.com/Handlers/index.cfm?ID=12067&Method=Full or http://www2.allaire.com/Handlers/index.cfm?ID=12068&Method=Full
Hope that this will help !
Christian
Mark Wutka a écrit :
Zeljko-
According to the documentation for the servlet API, you should be able
to get the client certificate from the request object like this:X509Certificate cert = (X509Certificate) request.getAttribute(
"javax.servlet.request.X509Certificate");I have seen this work under Java Web Server, and I have found that it does
not work under Netscape Enterprise Server 3.6 calling into JRun. I'd love
to hear of other cases where it does work.
Mark===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
Some relevant FAQs on JSP/Servlets can be found at:http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
