The fix to the null pointer looks good. But I wonder about the default value of "want". This should occur if someone makes no setting for "clientauth". Would not the intent be here to make it "no" or "off"? I"m not sure what the setting for negative is. There may be a case with it set to "want" that the browser may decide to present a cert anyway, even for URL that does not even need it. Also , maybe a log to the catalina.out when the null for clientauth is found. ----- Original Message -----

From: "Christina Fu" <cfu@redhat.com> To: pki-devel@redhat.com Sent: Monday, September 15, 2014 6:09:43 PM Subject: [Pki-devel] [PATCH] TomcatJSS - NullPointerException in tomcatjss searching for attribute "clientauth"

This is the fix for the following upstream tomcatjss bug: https://bugzilla.redhat.com/show_bug.cgi?id=1052417

The fix is simply fixing the NullPointerException issue by giving "clientauth" directive a default of "want". This will cause the desired default behavior for Dogtag servers.

thanks, Christina

_______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel