https://bz.apache.org/bugzilla/show_bug.cgi?id=68677

--- Comment #6 from Christopher Schultz <ch...@christopherschultz.net> ---
(In reply to dub357 from comment #5)
> How would things like REMOTE_USER or the client
> certificate get propagated to Tomcat?  This is something your presentation
> fails to discuss and is arguably the biggest advantage of AJP over other
> protocols.

Slide 30 recommends using SSLValve specifically to handle client certificates.

I think REMOTE_USER is not handled by any component other than the AJP
connector at this point. There is certainly room for improvement, there.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to