Re: Detect SSL
Re: Detect SSL
- Subject: Re: Detect SSL
- From: Don Lindsay <email@hidden>
- Date: Fri, 2 May 2008 09:46:31 -0400
I am using JK in production, but in development I am only using Tomcat.
Don
On May 2, 2008, at 8:46 AM, Steve Quirk wrote:
On Thu, 1 May 2008, Don Lindsay wrote:
Hello;
I want to identify if an application is being served via SSL. How
can I do this? I have looked at all the headers available through
the request.
In servlet containers, the SSL parameters are in request attributes,
not headers. The servlet api to use is
javax.servlet.ServletRequest.getAttribute() - from that you can get
the cipher, client cert, etc. I don't offhand know the WO api to
get the servlet request from the WO request.
Are you using just tomcat or mod_jk? You may (or may not) get more
information from jk than from just tomcat. (You should be using
mod_jk for any app that has any nontrivlal load anyhow).
Steve
Also, how can I get a handle to a client certificate if a person
has a PKI card?
Don
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden