Hardcoded SSL client authentication
Brought to you by:
niallg
Method org.simpleframework.transport.Handshake.run() hardcodes client authentication by means of engine.setWantClientAuth(true);
This leads to ugly identification request popups in IE7 and below.
Preferences regarding client authentication (wanted / needed) can be set outside of the simple framwork using:
- javax.net.ssl.SSLContext.getDefaultSSLParameters().setWantClientAuth(...);
- javax.net.ssl.SSLContext.getDefaultSSLParameters().setNeedClientAuth(...);
So probably just removing "engine.setWantClientAuth(true);" in the Handshake.rrun method should do the trick.