CertificateValidationLoginModule class

Authenticates the user based on the supplied certificate chain and adds the Certificate DN or the Certificate chain itself to the Principal set based on the configuration options.

Syntax

public class CertificateValidationLoginModule

Remarks

The authentication is successful if the provider is able to validate the certificate chain retrieved from the CertificateCallback successfully based on the configuration properties.

After successfully validating the certificate, the provider stores the certificate in the shared context state indexed with the key ProviderConst.CERTIFICATE_SHARED_KEY so other providers in the security configuration can access it. The subjectDN from the client certificate (or the certificate itself) is added to the authenticated JAAS subject as CertificateIDPrincipal if the configuration property ProviderConst.VALIDATED_CERT_IS_IDENTITY is set to true. If the configuration property value is false, a CertificatePrincipal with the subjectDN from the certificate and validated certificate chain is added to the authenticated JAAS subject.