Mailing-List: contact axis-user-help@ws.apache.org; run by ezmlm
Precedence: bulk
Reply-To: axis-user@ws.apache.org
Received-SPF: pass (nike.apache.org: local policy)
From: David Meiklejohn <dmeiklejohn@iseek.com.au>
To: "'axis-user@ws.apache.org'" <axis-user@ws.apache.org>
Date: Thu, 14 May 2009 11:50:41 +1000
Subject: [Axis2] Retrieve client certificate info used in connection to web
 service
Thread-Topic: [Axis2] Retrieve client certificate info used in connection to
 web service
Thread-Index: AcnUNmNvijG2GIdzR+OBxAE55t2YZg==
Message-ID: 
 <9DC1FE964F4FB644AAA1F749EE21103F99A6B6A04B@exchange2.intranet.iseek.com.au>
Accept-Language: en-US
Content-Language: en-US
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Hello,

I am attempting to figure out if it is possible to retrieve certificate inf=
ormation that was sent by the client as part of a web service request. The =
catch is it isn't using WS Security, it is simply HTTP authentication with =
the certificate.

What I am trying to achieve is basically this:

A client sends a request to a web service with their certificate as part of=
 the request.
The server verifies that it trusts the certificate.
The web service uses the certificate information to figure out who the clie=
nt is and then send that client ID information down the line to other syste=
ms.

I was able to find some information on using MessageContext to get the Http=
ServletRequest which then you are supposed to be able to get the certificat=
e used by calling getAttribute on the request. However, I couldn't find any=
 information on doing this in Axis2.

This solution will likely be deployed in JBoss but it could potentially end=
 up in Tomcat. Is it possible to do what I am attempting to do with Axis2? =
Or should I be looking for another solution to achieve this? Is there any s=
oftware that will provide functionality similar to what I am after?

Any help will be greatly appreciated.

Regards,
David