Create secure connector for Client Certificate #1390

MiguelAHM · 2024-02-01T10:27:37Z

No description provided.

whois-api/src/main/java/net/ripe/db/whois/api/httpserver/JettyBootstrap.java

whois-api/src/main/java/net/ripe/db/whois/api/httpserver/RewriteEngine.java

whois-commons/src/test/resources/whois.properties

...src/test/java/net/ripe/db/whois/api/httpserver/AbstractClientCertificateIntegrationTest.java

...net/ripe/db/whois/update/authentication/credential/ClientCertificateCredentialValidator.java

… is not enabled

whois-api/src/test/java/net/ripe/db/whois/api/httpserver/AbstractHttpsIntegrationTest.java

MiguelAHM · 2024-02-05T08:11:26Z

working fine after last changes

MiguelAHM · 2024-02-05T11:55:57Z

MiguelAHM added 23 commits January 25, 2024 13:33

feat: add new secure connector to the current server

e4d0c14

feat: comment previous secure port

d43123d

feat: specify host

f5ad290

feat: add host

5047ef7

feat: create client auth connector

713d45e

feat: enable https again in rest api

e5b579a

feat: leave it as before

8aa9428

feat: specify the host for client auth

ccd3f23

feat: remove host

e1bbd27

feat: create another secure connection with client auth enabled

296e7e6

feat: put rest as before, just enable client auth cert

4c0814b

feat: do not trust all cacert

b679831

feat: enable client cert for both ports if cert auth enabled

3475111

feat: change the property in everyplace that was in use

c360f30

feat: put the correct port

8d081ce

feat: server will validate agains truststore

0b939eb

feat: the to false the server validation

364274c

feat: try with setWantClientAuth

aa17931

feat: put the correct configuration

adf0be0

feat: configure the properties correctly

585c166

feat: set want client auth instead of needed

5995c84

feat: try with setNeed

1da52d4

feat: use needed just when is client Certificate

1c66a83

MiguelAHM requested review from eshryane, fmurodov, isvonja and maggarwal13 as code owners February 1, 2024 10:27