[jetty-user] Clearing SSL session in jetty?

I am trying to clear the SSL session information. Any idea if it is possible to clear the SSL Session information in Jetty? 

You can do it in apache as described at the end of this document:

http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html

----------------------------------------
// Standard HTTP session invalidation
session.invalidate();

// Invalidate the SSL Session
org.apache.tomcat.util.net.SSLSessionManager mgr =
 (org.apache.tomcat.util.net.SSLSessionManager)
 request.getAttribute("javax.servlet.request.ssl_session_mgr");
mgr.invalidateSession();

// Close the conection since the SSL session will be active until the connection
// is closed
response.setHeader("Connection", "close");
------------------------------------------

I am trying to research the possibility of SSL logout. I don't hold out that much hope for it, but it is really worth trying carefully. So if there is a hack I would need to apply to get the session I'd be happy to try that. 


Henry

Social Web Architect
http://bblfish.net/


---------------------------------------------------------------------
To unsubscribe from this list, please visit:

    http://xircles.codehaus.org/manage_email