From ba9ea52d11b6ac81120f35351ee632191f251f7d Mon Sep 17 00:00:00 2001 From: Mathieu Baudier Date: Wed, 14 Nov 2018 11:16:23 +0100 Subject: [PATCH] Make client certificate authorization more robust --- .../src/org/argeo/cms/auth/HttpSessionLoginModule.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java b/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java index 7622eef27..cbd54063c 100644 --- a/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java +++ b/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java @@ -211,7 +211,7 @@ public class HttpSessionLoginModule implements LoginModule { String certDn = req.getHeader(clientDnHttpHeader); // TODO retrieve more cf. https://httpd.apache.org/docs/current/mod/mod_ssl.html // String issuerDn = req.getHeader("SSL_CLIENT_I_DN"); - if (certDn != null && !certDn.trim().equals("")) { + if (certDn != null && !certDn.trim().equals("(null)")) { sharedState.put(CmsAuthUtils.SHARED_STATE_NAME, certDn); sharedState.put(CmsAuthUtils.SHARED_STATE_CERTIFICATE_CHAIN, ""); if (log.isDebugEnabled()) -- 2.30.2