IDPv3 X509Auth - accessing certificate

[Emilio Penna]

Scott, Tom, thank you for your answers,

I can access now the certificate in a scripted attribute with

cert = 
profileContext.getSubcontext("net.shibboleth.idp.authn.context.SubjectContext").getSubjects().get(0).getPublicCredentials().toArray()[0];

and (for example)  get the  serial number with:

serial=cert.getSerialNumber();

Regards
Emilio


El 15/12/2015 22:35, Cantor, Scott escribió:
> On 12/15/15, 6:29 PM, "users on behalf of Emilio Penna"<users-bounces at shibboleth.net on behalf of emilio.penna at seciu.edu.uy>  wrote:
>
>
>
>> I see that net.shibboleth.idp.authn.impl.X509AuthServlet sets the
>> certificate in
>> subject.getPublicCredentials().add(cert)
> That's how, you get it from the authenticated Subject's principal collection.
>
> -- Scott
>