X509 Authn behind Apache proxy

Cantor, Scott cantor.2 at osu.edu
Thu Jun 22 20:22:34 EDT 2017


On 6/22/17, 8:13 PM, "users on behalf of Ian Bobbitt" <users-bounces at shibboleth.net on behalf of ibobbitt at globalnoc.iu.edu> wrote:

> Is this something you would be interested in adding, or would accept 
> patches for?

That's fine, but it's a little more subtle than that, the standard attribute is populated as an array of Java certificate objects, while a header is text and you'd have to assume or configure encodings, etc.

You could write a Java servlet filter to wrap all this and populate the standard attribute (which is what you'd have to do if you want to do this now) and I'm not sure in the scheme of things if that wouldn't be the best choice anyway, just to maintain some separation.

-- Scott




More information about the users mailing list