On your servlet side include following code:
X509Certificate[] certs = (X509Certificate []) 
request.getAttribute("javax.servlet.request.X509Certificate");
X509Certificate clientCert = certs[0];

Client certificate that is sent from client side is always on index 0.

Best regards,
   Kovi

> 
> Od: "J.W. Koelewijn" <[EMAIL PROTECTED]>
> Datum: 2003/11/12 Sre PM 08:02:44 GMT+01:00
> Za: [EMAIL PROTECTED]
> Zadeva: SSL - Tomcat
> 
> Hello,
> 
> First of all I want to excuse if this question was raised before, but I'm 
> new on the mailinglist.
> Now on to the question:
> I want to work with SSL on my tomcat, to protect the content sent to it and 
> from it. By what I've read so far, I understand that SSL certificates are 
> sent from the server to the client and the browser of the user will 
> generate a popup giving the details of the certificate. My question now is, 
> is it possible to just send and receive the certificate, and check in my 
> servlet code whether the certificate is correct? So no confirmation of a 
> user (which isn't there in my case, everything shold be automated) is needed?
> 
> Thanks in advance,
> J.W. Koelewijn
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to