- All Implemented Interfaces:
- javax.servlet.Filter
public abstract class X509ServletFilterBase
extends Object
implements javax.servlet.Filter
The X509ServletFilterBase enforces X509 Authentication.
Optional Init Param:
cert-contains : Ensure that the principal subject of the cert contains a specific string.
The X509ServletFilter will also ensure that the cert is present in the request, which will only happen if there
is a successful SSL handshake which includes client authentication. This handshake is handled by the Application Server.
A SSL handshake that does not include client Authentication will receive a 403 error response.
The checkInforce method must be implemented to determine if the X509 Authentication is turned on. This allows
applications to turn on/off X509 Authentication based on parameters outside of the web.xml.