org.keycloak.services.x509

## Class ApacheProxySslClientCertificateLookup

- java.lang.Object
- - org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup
  - - org.keycloak.services.x509.ApacheProxySslClientCertificateLookup

- All Implemented Interfaces:
    Provider, X509ClientCertificateLookup

      public class ApacheProxySslClientCertificateLookup
      extends AbstractClientCertificateFromHttpHeadersLookup

  The provider allows to extract X.509 client certificate forwarded to keycloak configured behind the Apache reverse proxy.
  Since:
    3/29/2017
  Version:
    $Revision: 1 $
  Author:
    Peter Nalyvayko

- - ### Field Summary

    - ### Fields inherited from class org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup

      `certificateChainLength, logger, sslCertChainHttpHeaderPrefix, sslClientCertHttpHeader`

  - ### Constructor Summary

    Constructors
    Constructor and Description
    `ApacheProxySslClientCertificateLookup(String sslCientCertHttpHeader, String sslCertChainHttpHeaderPrefix, int certificateChainLength)`

  - ### Method Summary

    All Methods Instance Methods Concrete Methods
    Modifier and Type | Method and Description
    --- | ---
    `protected X509Certificate` | `decodeCertificateFromPem(String pem)`

    - ### Methods inherited from class org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookup

      `close, getCertificateChain, getCertificateFromHttpHeader`

    - ### Methods inherited from class java.lang.Object

      `clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

- - ### Constructor Detail

    - #### ApacheProxySslClientCertificateLookup

          public ApacheProxySslClientCertificateLookup(String sslCientCertHttpHeader,
                                                       String sslCertChainHttpHeaderPrefix,
                                                       int certificateChainLength)

  - ### Method Detail

    - #### decodeCertificateFromPem

          protected X509Certificate decodeCertificateFromPem(String pem)
                                                      throws PemException

      Specified by:
        `decodeCertificateFromPem` in class `AbstractClientCertificateFromHttpHeadersLookup`
      Throws:
        `PemException`

Copyright © 2020 JBoss by Red Hat. All rights reserved.