Re: Support for X-Forwarded-Client-Certificate

2019-11-04 Thread Nimish Telang
! Nimish On 11/4/19, 4:57 AM, "Jason Pyeron" wrote: Use a mock cipher suite name, e.g. LAYER_7_WAF_INJECTION > -Original Message- > From: Nimish Telang [mailto:nim...@telang.net.INVALID] > Sent: Sunday, November 3, 2019 7:08 PM > To

Re: Support for X-Forwarded-Client-Certificate

2019-11-03 Thread Nimish Telang
the default get client certificate Servlet features can be used. > -Original Message- > From: Nimish Telang [mailto:nim...@telang.net.INVALID] > Sent: Sunday, November 3, 2019 6:03 PM > To: users@cxf.apache.org > Subject: Support for X-Forwarded-Client-Certifi

Support for X-Forwarded-Client-Certificate

2019-11-03 Thread Nimish Telang
Hi, I’m trying to run a CXF service behind an NGINX-ingress http proxy that has to terminate mutual TLS. I’d like to have the client certificate forwarded to the CXF server, since it’s needed to verify SAML and XML signature trust (they just include the RSA public key). Is this natively