[FELIX-4230] Enhance the Felix request SSL filter to provide the cert as a request attribute

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: http-2.2.2
• Component/s: HTTP Service
• Assignee: Felix Meschberger
• Reporter: Timothee Maret
• Created: 17/Sep/13 11:25
• Updated: 01/Aug/15 09:22
• Resolved: 15/Nov/13 13:26

Description

The HTTP SSL Filter allows simulating an HTTPS request on a system sitting behind an SSL terminating proxy. The proxy forwards SSL information to the system and the filter resurrects the SSL behavior for the web application.

Apart from just resurrecting the fact that the original request was secure, it is sometimes also required to get at the client's certificate (if provided) used on the HTTPS session.

The expectation is that the SSL terminating proxy provides the certificate in linearized (line breaks replaced by single blanks) PEM format in the "X-Forwarded-SSL-Certificate" header. The filter will convert this header value in an X509Certificate[] array to be set as the "javax.servlet.request.X509Certificate" request attribute as defined by the servlet API specification.