(no subject)
Eric Jablow <[email protected]>
| Newsgroups | gmane.comp.web.httpunit.devel |
|---|---|
| Message-ID | <[email protected]> |
This must be an old chestnut, but I hope one of you has solved this or knows what alternative I should use. I am writing a web application that will use SSL authentication; users will be identified by their certificates, and there will be no login pages or passwords floating around. I am writing a Java authentication filter that takes the certificates, finds the first one, and looks up the DN in a database or LDAP. In actual operation, that certificate will be the only one. I would like to test my authentication filter. I want Alice, with certificate A, to have full access. I want Bob, with certificate B, to have limited access. And, I want to have Sam the saboteur to have no access. The HTTPUnit SSL FAQ tells me I must put each of their certificates into the JVM's store. However, this means my tests will not be able to distinguish between Alice, Bob, and Sam. Without changing my application to provide a user name parameter, how can I tell HTTPUnit to send only one certificate to the server per unit test method? If I need another tool, can one of you recommend one to me? If I need another approach, please let me know. Respectfully, Eric Jablow (703) 889-3433 ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace