public class SSLValve extends ValveBase
Note: Ensure that the headers are always set by httpd for all requests to prevent a client spoofing SSL information by sending fake headers.
In httpd.conf add the following:
<IfModule ssl_module> RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s" RequestHeader set SSL_CIPHER "%{SSL_CIPHER}s" RequestHeader set SSL_SESSION_ID "%{SSL_SESSION_ID}s" RequestHeader set SSL_CIPHER_USEKEYSIZE "%{SSL_CIPHER_USEKEYSIZE}s" </IfModule>In server.xml, configure this valve under the Engine element in server.xml:
<Engine ...> <Valve className="org.apache.catalina.valves.SSLValve" /> <Host ... /> </Engine>
container, containerLog, controller, domain, info, mserver, next, oname, sm
Constructor and Description |
---|
SSLValve() |
Modifier and Type | Method and Description |
---|---|
void |
invoke(Request request,
Response response)
The implementation-specific logic represented by this Valve.
|
java.lang.String |
mygetHeader(Request request,
java.lang.String header) |
backgroundProcess, createObjectName, event, getContainer, getContainerName, getController, getDomain, getInfo, getNext, getObjectName, getParentName, postDeregister, postRegister, preDeregister, preRegister, setContainer, setController, setNext, setObjectName, toString
public java.lang.String mygetHeader(Request request, java.lang.String header)
public void invoke(Request request, Response response) throws java.io.IOException, javax.servlet.ServletException
ValveBase
This method MUST be provided by a subclass.
invoke
in interface Valve
invoke
in class ValveBase
request
- The servlet request to be processedresponse
- The servlet response to be createdjava.io.IOException
- if an input/output error occursjavax.servlet.ServletException
- if a servlet error occursCopyright © 2000-2019 Apache Software Foundation. All Rights Reserved.