luehe 2003/10/17 11:47:43
Modified: catalina/src/share/org/apache/catalina/authenticator
SSLAuthenticator.java
Log:
In case the server needs to reinitiate SSL handshake (with client auth
enabled), consume request body and buffer it, so that it does not
interfere with client's handshake messages.
Many thanks to Bill Barker for helping me with this!
Revision Changes Path
1.9 +4 -11
jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SSLAuthenticator.java
Index: SSLAuthenticator.java
===================================================================
RCS file:
/home/cvs/jakarta-tomcat-catalina/catalina/src/share/org/apache/catalina/authenticator/SSLAuthenticator.java,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -r1.8 -r1.9
--- SSLAuthenticator.java 2 Sep 2003 21:22:04 -0000 1.8
+++ SSLAuthenticator.java 17 Oct 2003 18:47:43 -0000 1.9
@@ -147,13 +147,6 @@
if (debug >= 1)
log(" Looking up certificates");
- if ("POST".equalsIgnoreCase(((HttpServletRequest)
request.getRequest()).getMethod())) {
- // Causes POST of application/x-www-form-urlencoded to be read,
- // removing data from socket so that a cert exchange can happen if
needed.
- // A more general solution for all POSTs is coming 01-Nov-2002 bobh
- ((HttpServletRequest) request.getRequest()).getParameterMap();
- }
-
X509Certificate certs[] = (X509Certificate[])
request.getRequest().getAttribute(Globals.CERTIFICATES_ATTR);
if ((certs == null) || (certs.length < 1)) {
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
