[jboss-jira] [JBoss JIRA] Closed: (JBAS-3777) Cannot get client cerfiticate when using IIS 6
[ http://jira.jboss.com/jira/browse/JBAS-3777?page=all ]
Tomaz Cerar closed JBAS-3777.
-----------------------------
Resolution: Rejected
IIS 6 handles certificates differently that prior versions. In iis 5.x once that you made
authentication and sent SSL certificate that certificate would be there in every request
for all urls until end of user session. in ii6 you get ssl only in folder that SSL
certificate protected and not anywhere as it just to be.
Cannot get client cerfiticate when using IIS 6
----------------------------------------------
Key: JBAS-3777
URL: http://jira.jboss.com/jira/browse/JBAS-3777
Project: JBoss Application Server
Issue Type: Bug
Security Level: Public(Everyone can see)
Components: Web (Tomcat) service
Affects Versions: JBossAS-4.0.3 SP1
Environment: Windows 2003 SP1, IIS 6, Tomcat connector 1.2.19
Reporter: Tomaz Cerar
Assigned To: Remy Maucherat
Original Estimate: 1 day
Remaining Estimate: 1 day
We have an application where user can authenticate himself with Client certificate.
SSL and authentication is done by IIS 6.
The problem is that after auth is successful but I don't get client certificate in
servlet.
request.getAttribute("javax.servlet.request.X509Certificate") returns null
The same application with same configuration works ok on IIS 5(old production box) and
IIS 5.1 (development)
I have tried with various versions of JK and JK2 and same result, doesn't work in IIS
6.
I have tried to run IIS in IIS 5 isolation mode and without, and results are same.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira