请问 读取浏览器证书问题

Question

X509Certificate[] ca = (X509Certificate[]) httpservletrequest.getAttribute("javax.servlet.request.X509Certificate");
总是为null
已经配置tomcat。

Answer 1

用自带的keytool生成的证书，并导入浏览器中。tomcat配置如下
<Connector className="org.apache.catalina.connector.http.HttpConnector" 
           port="8443" minProcessors="5" maxProcessors="75" 
           enableLookups="true" keystoreFile="server.keystore" keystorePass="changeit" acceptCount="10" debug="0" scheme="https" secure="true">; 
<Factory className="org.apache.catalina.net.SSLServerSocketFactory" 
  clientAuth="true" protocol="TLS"/>; 
</Connector>

Answer 2

参考下这个
http://blog.csdn.net/fallraining/archive/2009/01/06/3718986.aspx