You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@tomcat.apache.org by Mark Thomas <me...@ntlworld.com> on 2003/08/20 22:05:02 UTC

[PATCH] Prevent NPE if CLIENT-CERT auth fails

A small patch.

If auth fails, SSL session is terminated. Subsequent call to 
sslSupport.getPeerCertifcate() generates a NPE as sslSupport is null in this 
case.