Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-29

HttpServletRequest is missing javax.servlet.request.* attributes when request is secure

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 1.0.0.Alpha8
    • None
    • SSL
    • None

    Description

      I'm testing a WS exchange requiring secure transport; the internal Apache CXF impl relies on the javax.servlet.request.cipher_suite prop content for internal security policy configurations and checks. That prop is currently not set, while it was set to TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA by jboss-web when running the same test.

      We are missing whole 3.9 section of servlet 3.1 spec
      missing attributes:

      javax.servlet.request.cipher_suite
javax.servlet.request.key_size
javax.servlet.request.ssl_session_id
javax.servlet.request.X509Certificate

      Attachments

        Issue Links

          blocks

          Task - Represents a small unit of work that is not end-user facing. JBWS-3622 Restore HTTPS tests w/ Undertow

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          causes

          Bug - A problem that impairs or prevents the functions of the product. UNDERTOW-2140 SSLSessionInfo.calculateKeySize(String cipherSuite) doesn't account for all cipher suits

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              tomazcerar Tomaž Cerar (Inactive)
              rhn-support-asoldano Alessio Soldano
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: