Hello. This is the first time I post something here, because whenever I had a question always found the solution at some old topic. But this time I have not found something that works. So let the doubt:
ENVIRONMENT:
Apache 2.2 (HTTPS) => Jboss 4.2.3 (HTTPS)
I have an application running on JBoss, with authentication via digital certificates, to directly access the JSP page on Jboss works perfectly, the script opens, I choose the certificate in jsp page use
"java.security.cert.X509Certificate certChain[] = (java.security.cert.X509Certificate[]) request.getAttribute("javax.servlet.request.X509Certificate");"
to pick up the certificate and validate in my application. This works perfectly.
Now when I put the APACHE Jboss before doing the redirect from https to https jboss, the request.getAttribute always returns NULL. What should I do?
I have also tried with the variables:
SSL_CLIENT_CERT, but only returns NULL
Settings that did:
<VirtualHost myserver:443>
ServerName myserver.local
SSLEngine On
SSLProxyEngine On
SSLCertificateFile ...myfile.crt
SSLCertificateKeyFile ...myfile.key
SSLCACertificateFile ...ca.crt
SSLVerifyClient optional
SSLVerifyDepth 2
SSLOptions +ExportCertData + StdEnvVars
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
</Location>
</VirtualHost>
anyone have any idea to help me?
grateful