[Pki-devel] [PATCH] TomcatJSS - NullPointerException in tomcatjss searching for attribute "clientauth"

[John Magne]

The fix to the null pointer looks good.

But I wonder about the default value of "want".

This should occur if someone makes no setting for "clientauth".

Would not the intent be here to make it "no" or "off"? I"m
not sure what the setting for negative is.

There may be a case with it set to "want" that the browser may decide
to present a cert anyway, even for URL that does not even need it.


Also , maybe a log to the catalina.out when the null for clientauth is found.



----- Original Message -----
> From: "Christina Fu" <cfu at redhat.com>
> To: pki-devel at redhat.com
> Sent: Monday, September 15, 2014 6:09:43 PM
> Subject: [Pki-devel] [PATCH] TomcatJSS - NullPointerException in tomcatjss searching for attribute "clientauth"
> 
> This is the fix for the following upstream tomcatjss bug:
> https://bugzilla.redhat.com/show_bug.cgi?id=1052417
> 
> The fix is simply fixing the NullPointerException issue by giving
> "clientauth" directive a default of "want".
> This will cause the desired default behavior for Dogtag servers.
> 
> thanks,
> Christina
> 
> 
> 
> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel