The fix to the null pointer looks good.
But I wonder about the default value of "want".
This should occur if someone makes no setting for "clientauth".
Would not the intent be here to make it "no" or "off"? I"m
not sure what the setting for negative is.
There may be a case with it set to "want" that the browser may decide
to present a cert anyway, even for URL that does not even need it.
Also , maybe a log to the catalina.out when the null for clientauth is found.
----- Original Message -----
From: "Christina Fu" <cfu(a)redhat.com>
To: pki-devel(a)redhat.com
Sent: Monday, September 15, 2014 6:09:43 PM
Subject: [Pki-devel] [PATCH] TomcatJSS - NullPointerException in tomcatjss searching for
attribute "clientauth"
This is the fix for the following upstream tomcatjss bug:
https://bugzilla.redhat.com/show_bug.cgi?id=1052417
The fix is simply fixing the NullPointerException issue by giving
"clientauth" directive a default of "want".
This will cause the desired default behavior for Dogtag servers.
thanks,
Christina
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel