[jboss-jira] [JBoss JIRA] Closed: (JBAS-3777) Cannot get client cerfiticate when using IIS 6

[Tomaz Cerar (JIRA)]

     [ http://jira.jboss.com/jira/browse/JBAS-3777?page=all ]

Tomaz Cerar closed JBAS-3777.
-----------------------------

    Resolution: Rejected

IIS 6 handles certificates differently that prior versions. In iis 5.x once that you made authentication and sent SSL certificate that certificate would be there in every request for all urls until end of user session. in ii6 you get ssl only in folder that SSL certificate protected and not anywhere as it just to be.

> Cannot get client cerfiticate when using IIS 6
> ----------------------------------------------
>
>                 Key: JBAS-3777
>                 URL: http://jira.jboss.com/jira/browse/JBAS-3777
>             Project: JBoss Application Server
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>          Components: Web (Tomcat) service
>    Affects Versions: JBossAS-4.0.3 SP1
>         Environment: Windows 2003 SP1, IIS 6, Tomcat connector 1.2.19
>            Reporter: Tomaz Cerar
>         Assigned To: Remy Maucherat
>   Original Estimate: 1 day
>  Remaining Estimate: 1 day
>
> We have an application where user can authenticate himself with Client certificate.
> SSL and authentication is done by IIS 6.
> The problem is that after auth is successful but I don't get client certificate in servlet.
> request.getAttribute("javax.servlet.request.X509Certificate") returns null
> The same application with same configuration works ok on IIS 5(old production box) and IIS 5.1 (development)
> I have tried with various versions of JK and JK2 and same result, doesn't work in IIS 6.
> I have tried to run IIS in IIS 5 isolation mode and without, and results are same.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira