X509 Authn in IDPv3

[Cantor, Scott]

On 4/6/16, 8:42 AM, "users on behalf of Mike Wiseman" <users-bounces at shibboleth.net on behalf of mike.wiseman at utoronto.ca> wrote:



>My experience in using the idp-v3 X509AuthHandler is that a Java ‘response object’ is required by the servlet. A Java service needs to have handled the X509 authentication to generate the required object response.

The +ExportCertData option in mod_ssl when using AJP will populate it. That said, I don't think I would necessarily favor using Apache just to get this part done, but it does work.

-- Scott