org.apache.catalina.valves.SSLValve java code examples

String strcert0 = mygetHeader(request, "ssl_client_cert");
if (strcert0 != null && strcert0.length()>28) {
  String strcert1 = strcert0.replace(' ', '\n');
strcert0 = mygetHeader(request, "ssl_cipher");
if (strcert0 != null) {
  request.setAttribute(Globals.CIPHER_SUITE_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_session_id");
if (strcert0 != null) {
  request.setAttribute(Globals.SSL_SESSION_ID_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_cipher_usekeysize");
if (strcert0 != null) {
  request.setAttribute(Globals.KEY_SIZE_ATTR, strcert0);
getNext().invoke(request, response);

String strcert0 = mygetHeader(request, "ssl_client_cert");
if (strcert0 != null && strcert0.length()>28) {
  String strcert1 = strcert0.replace(' ', '\n');
strcert0 = mygetHeader(request, "ssl_cipher");
if (strcert0 != null) {
  request.setAttribute("javax.servlet.request.cipher_suite", strcert0);
strcert0 = mygetHeader(request, "ssl_session_id");
if (strcert0 != null) {
  request.setAttribute("javax.servlet.request.ssl_session", strcert0);
strcert0 = mygetHeader(request, "ssl_cipher_usekeysize");
if (strcert0 != null) {
  request.setAttribute("javax.servlet.request.key_size", strcert0);
getNext().invoke(request, response);

String strcert0 = mygetHeader(request, "ssl_client_cert");
if (strcert0 != null && strcert0.length()>28) {
  String strcert1 = strcert0.replace(' ', '\n');
strcert0 = mygetHeader(request, "ssl_cipher");
if (strcert0 != null) {
  request.setAttribute(Globals.CIPHER_SUITE_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_session_id");
if (strcert0 != null) {
  request.setAttribute(Globals.SSL_SESSION_ID_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_cipher_usekeysize");
if (strcert0 != null) {
  request.setAttribute(Globals.KEY_SIZE_ATTR, strcert0);
getNext().invoke(request, response);

String strcert0 = mygetHeader(request, "ssl_client_cert");
if (strcert0 != null && strcert0.length()>28) {
  String strcert1 = strcert0.replace(' ', '\n');
strcert0 = mygetHeader(request, "ssl_cipher");
if (strcert0 != null) {
  request.setAttribute(Globals.CIPHER_SUITE_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_session_id");
if (strcert0 != null) {
  request.setAttribute(Globals.SSL_SESSION_ID_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_cipher_usekeysize");
if (strcert0 != null) {
  request.setAttribute(Globals.KEY_SIZE_ATTR, strcert0);
getNext().invoke(request, response);

throws IOException, ServletException {
String strcert0 = mygetHeader(request, sslClientCertHeader);
if (strcert0 != null && strcert0.length()>28) {
  String strcert1 = strcert0.replace(' ', '\n');
strcert0 = mygetHeader(request, sslCipherHeader);
if (strcert0 != null) {
  request.setAttribute(Globals.CIPHER_SUITE_ATTR, strcert0);
strcert0 = mygetHeader(request, sslSessionIdHeader);
if (strcert0 != null) {
  request.setAttribute(Globals.SSL_SESSION_ID_ATTR, strcert0);
strcert0 = mygetHeader(request, sslCipherUserKeySizeHeader);
if (strcert0 != null) {
  request.setAttribute(Globals.KEY_SIZE_ATTR, Integer.valueOf(strcert0));
getNext().invoke(request, response);

String strcert0 = mygetHeader(request, "ssl_client_cert");
if (strcert0 != null && strcert0.length()>28) {
  String strcert1 = strcert0.replace(' ', '\n');
strcert0 = mygetHeader(request, "ssl_cipher");
if (strcert0 != null) {
  request.setAttribute(Globals.CIPHER_SUITE_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_session_id");
if (strcert0 != null) {
  request.setAttribute(Globals.SSL_SESSION_ID_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_cipher_usekeysize");
if (strcert0 != null) {
  request.setAttribute(Globals.KEY_SIZE_ATTR,
      Integer.valueOf(strcert0));
getNext().invoke(request, response);

String strcert0 = mygetHeader(request, "ssl_client_cert");
if (strcert0 != null && strcert0.length()>28) {
  String strcert1 = strcert0.replace(' ', '\n');
strcert0 = mygetHeader(request, "ssl_cipher");
if (strcert0 != null) {
  request.setAttribute(Globals.CIPHER_SUITE_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_session_id");
if (strcert0 != null) {
  request.setAttribute(Globals.SSL_SESSION_ID_ATTR, strcert0);
  request.setAttribute(Globals.SSL_SESSION_ID_TOMCAT_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_cipher_usekeysize");
if (strcert0 != null) {
  request.setAttribute(Globals.KEY_SIZE_ATTR,
      Integer.valueOf(strcert0));
getNext().invoke(request, response);

String strcert0 = mygetHeader(request, "ssl_client_cert");
if (strcert0 != null && strcert0.length()>28) {
  String strcert1 = strcert0.replace(' ', '\n');
strcert0 = mygetHeader(request, "ssl_cipher");
if (strcert0 != null) {
  request.setAttribute(Globals.CIPHER_SUITE_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_session_id");
if (strcert0 != null) {
  request.setAttribute(Globals.SSL_SESSION_ID_ATTR, strcert0);
  request.setAttribute(Globals.SSL_SESSION_ID_TOMCAT_ATTR, strcert0);
strcert0 = mygetHeader(request, "ssl_cipher_usekeysize");
if (strcert0 != null) {
  request.setAttribute(Globals.KEY_SIZE_ATTR,
      Integer.valueOf(strcert0));
getNext().invoke(request, response);

String headerValue = mygetHeader(request, sslClientCertHeader);
if (headerValue != null) {
  headerValue = headerValue.trim();
headerValue = mygetHeader(request, sslCipherHeader);
if (headerValue != null) {
  request.setAttribute(Globals.CIPHER_SUITE_ATTR, headerValue);
headerValue = mygetHeader(request, sslSessionIdHeader);
if (headerValue != null) {
  request.setAttribute(Globals.SSL_SESSION_ID_ATTR, headerValue);
headerValue = mygetHeader(request, sslCipherUserKeySizeHeader);
if (headerValue != null) {
  request.setAttribute(Globals.KEY_SIZE_ATTR, Integer.valueOf(headerValue));
getNext().invoke(request, response);

String headerValue = mygetHeader(request, sslClientCertHeader);
if (headerValue != null) {
  headerValue = headerValue.trim();
headerValue = mygetHeader(request, sslCipherHeader);
if (headerValue != null) {
  request.setAttribute(Globals.CIPHER_SUITE_ATTR, headerValue);
headerValue = mygetHeader(request, sslSessionIdHeader);
if (headerValue != null) {
  request.setAttribute(Globals.SSL_SESSION_ID_ATTR, headerValue);
headerValue = mygetHeader(request, sslCipherUserKeySizeHeader);
if (headerValue != null) {
  request.setAttribute(Globals.KEY_SIZE_ATTR, Integer.valueOf(headerValue));
getNext().invoke(request, response);

Javadoc

When using mod_proxy_http, the client SSL information is not included in the protocol (unlike mod_jk and mod_proxy_ajp). To make the client SSL information available to Tomcat, some additional configuration is required. In httpd, mod_headers is used to add the SSL information as HTTP headers. In Tomcat, this valve is used to read the information from the HTTP headers and insert it into the request.

Note: Ensure that the headers are always set by httpd for all requests to prevent a client spoofing SSL information by sending fake headers.

In httpd.conf add the following:

 
<IfModule ssl_module> 
RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s" 
RequestHeader set SSL_CIPHER "%{SSL_CIPHER}s" 
RequestHeader set SSL_SESSION_ID "%{SSL_SESSION_ID}s" 
RequestHeader set SSL_CIPHER_USEKEYSIZE "%{SSL_CIPHER_USEKEYSIZE}s" 
</IfModule>

In server.xml, configure this valve under the Engine element in server.xml:

 
<Engine ...> 
<Valve className="org.apache.catalina.valves.SSLValve" /> 
<Host ... /> 
</Engine>

Most used methods

Popular in Java

Creating JSON documents from java classes using gson
getExternalFilesDir (Context)
setScale (BigDecimal)
runOnUiThread (Activity)
BorderLayout (java.awt)
A border layout lays out a container, arranging and resizing its components to fit in five regions:
Color (java.awt)
The Color class is used to encapsulate colors in the default sRGB color space or colors in arbitrary
Kernel (java.awt.image)
Timestamp (java.sql)
A Java representation of the SQL TIMESTAMP type. It provides the capability of representing the SQL
BitSet (java.util)
The BitSet class implements abit array [http://en.wikipedia.org/wiki/Bit_array]. Each element is eit
ThreadPoolExecutor (java.util.concurrent)
An ExecutorService that executes each submitted task using one of possibly several pooled threads, n
Github Copilot alternatives

How to useSSLValve in org.apache.catalina.valves

Best Java code snippets using org.apache.catalina.valves.SSLValve (Showing top 10 results out of 315)

How to use
SSLValve
in
org.apache.catalina.valves