Menu

#29 Hardcoded SSL client authentication

open
nobody
None
5
2010-02-22
2010-02-22
Anonymous
No

Method org.simpleframework.transport.Handshake.run() hardcodes client authentication by means of engine.setWantClientAuth(true);

This leads to ugly identification request popups in IE7 and below.

Preferences regarding client authentication (wanted / needed) can be set outside of the simple framwork using:
- javax.net.ssl.SSLContext.getDefaultSSLParameters().setWantClientAuth(...);
- javax.net.ssl.SSLContext.getDefaultSSLParameters().setNeedClientAuth(...);

So probably just removing "engine.setWantClientAuth(true);" in the Handshake.rrun method should do the trick.

Discussion


Log in to post a comment.

Auth0 Logo