Re: Detect SSL
Re: Detect SSL
- Subject: Re: Detect SSL
- From: Steve Quirk <email@hidden>
- Date: Fri, 02 May 2008 08:46:51 -0400 (EDT)
On Thu, 1 May 2008, Don Lindsay wrote:
Hello;
I want to identify if an application is being served via SSL. How can I do
this? I have looked at all the headers available through the request.
In servlet containers, the SSL parameters are in request attributes, not
headers. The servlet api to use is
javax.servlet.ServletRequest.getAttribute() - from that you can get the
cipher, client cert, etc. I don't offhand know the WO api to get the
servlet request from the WO request.
Are you using just tomcat or mod_jk? You may (or may not) get more
information from jk than from just tomcat. (You should be using mod_jk
for any app that has any nontrivlal load anyhow).
Steve
Also, how can I get a handle to a client certificate if a person has a PKI
card?
Don
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
| References: | |
| | >Detect SSL (From: Don Lindsay <email@hidden>) |