Exit
  • Global community
    • Language:
      • Deutsch
      • English
      • Español
      • Français
      • Português
  • 日本語コミュニティ
  • 한국 커뮤니티
0

Reading Current SSL Client Certificate Data

Explorer ,
Mar 16, 2010 Mar 16, 2010

I have an SSL enabled website which requires client certificates using Cold Fusion (Current Version is 8, upgrading to 9).  We currently use the CGI variable CERT_SUBJECT to extract a user's common name from their client certificate from the website (Using IIS 6.0).  We use this Common Name value to determine who the user is, however I have new requirements which state I can no longer utilize the Subject Field, I must use a value located in Subject Alternative Name Field if it exists.   Is there a way to programmatically sift through the current client certificate being used in the current session and read all existing fields and their values that exist within that client certificate?

1.6K
Translate
Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Explorer ,
Mar 22, 2010 Mar 22, 2010
LATEST

Ok, I found my answer, this will return an entire x509 certificate's information...

<cfset x509 = GetPageContext().getRequest().getAttribute("javax.servlet.request.X509Certificate")>

<cfdump var=#x509[1]#>

Translate
Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Resources