[jboss-jira] [JBoss JIRA] (JBWEB-243) HTTPS / TLS Client certificate authentication does not give client certificate to server side

[Alessio Soldano (JIRA)]

     [ https://issues.jboss.org/browse/JBWEB-243?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Alessio Soldano moved JBWS-3461 to JBWEB-243:
---------------------------------------------

          Project: JBoss Web  (was: JBoss Web Services)
              Key: JBWEB-243  (was: JBWS-3461)
      Component/s:     (was: jbossws-cxf)
                       (was: jbossws-integration)
    Fix Version/s:     (was: jbossws-cxf-4.1)

    
> HTTPS / TLS Client certificate authentication does not give client certificate to server side
> ---------------------------------------------------------------------------------------------
>
>                 Key: JBWEB-243
>                 URL: https://issues.jboss.org/browse/JBWEB-243
>             Project: JBoss Web
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>         Environment: JBoss AS 7.1.0.GA
>            Reporter: Tomas Gustavsson
>
> We use client certificate authentication (TLS) for our webservice (JAX-WS annotated EJB).
> In JBoss 5 and 6 the following code worked to fetch the client certificate in the session bean.
> MessageContext msgContext = wsContext.getMessageContext();
> HttpServletRequest request = (HttpServletRequest) msgContext.get(MessageContext.SERVLET_REQUEST);
> X509Certificate[] certificates = (X509Certificate[]) request.getAttribute("javax.servlet.request.X509Certificate");
> In JBoss AS 7.1.0.GA no certificate is retrieved.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira