Cipher level X.509

[Former Member]

Hello wizards,

We are trying to do some java based client side validation of the SSL level of the browser i.e. just checking the browser has necessary SSL support.

Normally this is way its done using this JSP code.

request.getAttribute("java.net.ssl.cipher_suite");

This will return the cipher level of the browser. But when we do this on the SAP WEB Application server it gives a null.

This works normally in all Web Application Servers[IBM websphere or Apache Tomcat], but its not working on SAP server. Any suggestion on this regards would be really great

regards

Vivek Nidhi

[Vlado]

As there has been mail communication with Vivek, I'd like to share the solution here as well:

This attribute name had been used in older servlet spec versions – 2.1. The attribute name currently defined in the servlet spec is:

javax.servlet.request.cipher_suite

So try using this attribute in your code. Or you can list all attributes of the servlet request and check what is there and which names are used.

Cheers,

\-- Vladimir

[Former Member]

Hi,

Check the contents of the note,

Note 772517 - SapSSL-Update, less SSL warnings

Hope it helps !

Regards

Srinivasan T