Re: Client Certificates

2023-07-17 Thread Timothy Ward
Here is a filter that I am using to get the client certificates, the issue I'm having is passing them along via the headers so they can be picked up as CGI Environment Variables down the road. This does get me the certificate information though. Just ignor the mutableRequest stuff as that is what

Re: Get Client Certificate Information

2023-06-22 Thread Timothy Ward
< ch...@christopherschultz.net> wrote: > Timothy, > > On 6/22/23 14:01, Timothy Ward wrote: > > I am trying to go the route of modifying the CGIServlet from: h > > ttps:// > github.com/apache/tomcat/blob/main/java/org/apache/catalina/servlets/CGIServlet.java#L771 > >

Re: Get Client Certificate Information

2023-06-22 Thread Timothy Ward
; Timothy, > > On 6/21/23 16:56, Timothy Ward wrote: > > import javax.servlet.http.HttpServletRequest; > > import javax.security.cert.Certificate; > > import javax.security.cert.X509Certificate; > > > > public class GrabCert extends Object > &

Re: Get Client Certificate Information

2023-06-21 Thread Timothy Ward
or] (1: 0): location: class GrabCert [Error] (1: 0): 1 error On Wed, Jun 21, 2023 at 2:32 PM Christopher Schultz < ch...@christopherschultz.net> wrote: > Timothy, > > On 6/21/23 13:55, Timothy Ward wrote: > > Not sure it's lined up right, lost in copy/paste I think, the

Re: Get Client Certificate Information

2023-06-21 Thread Timothy Ward
I'm attempting to run this from within Oracle 19c, so I believe that is throwing a whole other wrinkle in there. On Wed, Jun 21, 2023 at 1:48 PM Mark Thomas wrote: > > > On 21/06/2023 18:29, Timothy Ward wrote: > > I tried the following: > > > > import javax

Re: Get Client Certificate Information

2023-06-21 Thread Timothy Ward
n 21, 2023 at 1:52 PM Rob Sargent wrote: > > > > On Jun 21, 2023, at 11:29 AM, Timothy Ward > wrote: > > > > I tried the following: > > > > import javax.servlet.http.HttpServletRequest; > > import javax.security.cert.Certificate; > > import ja

Re: Get Client Certificate Information

2023-06-21 Thread Timothy Ward
Thomas wrote: > On 12/06/2023 12:00, Timothy Ward wrote: > > Changing the CGI Servlet may be the easiest route, but if I wanted to use > > it as intended, I'm guessing I would use the original Java code that you > > sent below? > > > > X509Certificat

Re: Get Client Certificate Information

2023-06-12 Thread Timothy Ward
/apache/tomcat/blob/main/java/org/apache/catalina/servlets/CGIServlet.java#L771 > > You should be able to copy the source of Tomcat's CGI servlet, modify as > required and then just deploy it as part of the web application the same > way you would any other servlet. > > Mark >

Re: Get Client Certificate Information

2023-06-12 Thread Timothy Ward
would need to extend it and add the > certificate information as an additional environment variable (or > variables). > > Do you need to use CGI? It is fairly unusual to see CGI mention on this > list these days. > > Mark > > > On 11/06/2023 22:56, Timothy Ward wrote: >

Re: Get Client Certificate Information

2023-06-11 Thread Timothy Ward
quest().getAttribute("jakarta.servlet.request.X509Certificate"); > > > https://jakarta.ee/specifications/servlet/5.0/apidocs/jakarta/servlet/servletrequest#getAttribute(java.lang.String) > > On Sun, Jun 11, 2023 at 11:20 PM Timothy Ward > wrote: > > > > Tomcat 10

Get Client Certificate Information

2023-06-11 Thread Timothy Ward
Tomcat 10.1 setup using certificateVerification="required" on Windows Server 2019, is there a way to get the SSL_CLIENT_S_DN and SSL_CLIENT_I_DN via a CGI perl script? I think I have the SSLValve valve implemented, but there is nothing for sure that tells me that it is. The browser prompts for th