Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: neutral (herse.apache.org: local policy)
Message-ID: <463EF1B3.2090607@sepo.dk>
Date: Mon, 07 May 2007 11:30:27 +0200
From: Subscriber <subscriber@sepo.dk>
User-Agent: Thunderbird 1.5.0.10 (Windows/20070221)
MIME-Version: 1.0
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Handling SSL Client Auth abort
References: <4639C91E.6080400@sepo.dk>
 <BAY133-DAV159A23CE29256603265147AE410@phx.gbl> <4639DE2B.9090903@sepo.dk>
 <AEF3D568DD1D9E428048C592AA16459705CB4233@USRV-EXCH4.na.uis.unisys.com>
In-Reply-To: 
 <AEF3D568DD1D9E428048C592AA16459705CB4233@USRV-EXCH4.na.uis.unisys.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Hi,

>> ...unfortunately I never get that far where I can catch the 
>> exception. 
>> The exception is thrown within Tomcat and in my application code.
 >
> (I'll assume there's a rather critical "not" missing from the last
> clause in the above sentence.)
Of course - NOT in my application code :-)
> If the client refuses the certificate or otherwise breaks the connection
> during the SSL negotiation, no servlet has been selected to receive the
> message, so there's no one to deliver the exception to.  The servlet
> spec doesn't seem to have any notion of container-oriented error pages,
> so I think you're out of luck without custom code inside Tomcat.
> 
>  - Chuck

This is OK - but how do I put custom code into the Tomcat? I've already 
coded a custom realm for the purpose of verifying the certificate - 
could I use this realm to catch the exception?

Regards,
kews

---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org