Make client certificate authorization more robust

diff --git a/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java b/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java
index 7622eef27da26c49f13d6a56ef63a68e27f1387e..cbd54063cbda19c4496a4930566000f3a735ef36 100644 (file)
--- a/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java
+++ b/org.argeo.cms/src/org/argeo/cms/auth/HttpSessionLoginModule.java
@@ -211,7 +211,7 @@ public class HttpSessionLoginModule implements LoginModule {
                        String certDn = req.getHeader(clientDnHttpHeader);
                        // TODO retrieve more cf. https://httpd.apache.org/docs/current/mod/mod_ssl.html
                        // String issuerDn = req.getHeader("SSL_CLIENT_I_DN");
-                       if (certDn != null && !certDn.trim().equals("")) {
+                       if (certDn != null && !certDn.trim().equals("(null)")) {
                                sharedState.put(CmsAuthUtils.SHARED_STATE_NAME, certDn);
                                sharedState.put(CmsAuthUtils.SHARED_STATE_CERTIFICATE_CHAIN, "");
                                if (log.isDebugEnabled())