How do I get the client certificate from the request

[Former Member]

We are on Netweaver 2004 using the SAP webdispatcher (end-to-end). I need to do an OCSP validation, I have all of the code I need for the OCSP portion. What I need is the X509Certficate that came from the client. Is this stored in the request object, session? How do I get it?

Thanks.

[cand1 · Accepted solution]

Hi Joseph,

I think the question is which component terminates the SSL connection. It could be an upfront load balancer or the WebAS itself. The former could write the certificate into a request header vairable, while the latter will create a J2EE standard request attribute: javax.servlet.request.X509Certificate

I never did it with the web dispatcher, but you can try the following:

X509Certificate[] certs = (X509Certificate[]) request.getAttribute("javax.servlet.request.X509Certificate");

HTH

Daniel

[Former Member · Accepted solution]

Thanks for your response. I believe you are correct. IIS may be terminating the SSL connection.

Thanks,

Herb