From: Mathieu Baudier <mbaudier@argeo.org>
Date: Wed, 14 Nov 2018 10:16:23 +0000 (+0100)
Subject: Make client certificate authorization more robust
X-Git-Tag: argeo-commons-2.1.76~24
X-Git-Url: https://git.argeo.org/?a=commitdiff_plain;h=ba9ea52d11b6ac81120f35351ee632191f251f7d;p=lgpl%2Fargeo-commons.git

Make client certificate authorization more robust
---

diff --git a/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java b/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java
index 7622eef27..cbd54063c 100644
--- a/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java
+++ b/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java
@@ -211,7 +211,7 @@ public class HttpSessionLoginModule implements LoginModule {
 			String certDn = req.getHeader(clientDnHttpHeader);
 			// TODO retrieve more cf. https://httpd.apache.org/docs/current/mod/mod_ssl.html
 			// String issuerDn = req.getHeader("SSL_CLIENT_I_DN");
-			if (certDn != null && !certDn.trim().equals("")) {
+			if (certDn != null && !certDn.trim().equals("(null)")) {
 				sharedState.put(CmsAuthUtils.SHARED_STATE_NAME, certDn);
 				sharedState.put(CmsAuthUtils.SHARED_STATE_CERTIFICATE_CHAIN, "");
 				if (log.isDebugEnabled())