Make SSL client auth safer

[lgpl/argeo-commons.git] / org.argeo.node.api / src / org / argeo / node / NodeConstants.java

diff --git a/org.argeo.node.api/src/org/argeo/node/NodeConstants.java b/org.argeo.node.api/src/org/argeo/node/NodeConstants.java
index cb87f30b4881e9660ad0d52b147426b1b03e0cfd..31029d9915a9af57b3d6cea49f58257afce19932 100644 (file)
--- a/org.argeo.node.api/src/org/argeo/node/NodeConstants.java
+++ b/org.argeo.node.api/src/org/argeo/node/NodeConstants.java
@@ -101,6 +101,11 @@ public interface NodeConstants {
        // HTTP
        String HTTP_PORT = "org.osgi.service.http.port";
        String HTTP_PORT_SECURE = "org.osgi.service.http.port.secure";
+       /**
+        * The HTTP header used to convey the DN of a client verified by a reverse
+        * proxy. Typically SSL_CLIENT_S_DN for Apache.
+        */
+       String HTTP_PROXY_SSL_DN = "argeo.http.proxy.ssl.dn";
 
        /*
         * PIDs