java - WebSocket server get client certificate onOpen -

i have simple serverendpoint running on wildfly 10, configured wss mutual tls, client certificate required. have no problems in connecting endpoint, mutual authentication correctly done, can't access client certificate in onopen method. trying using getuserprincipal(), i'm getting null.

i need client certificate authorization purposes.

import java.io.ioexception; import java.security.principal;  import javax.servlet.http.httpsession; import javax.websocket.endpointconfig; import javax.websocket.onclose; import javax.websocket.onmessage; import javax.websocket.onopen; import javax.websocket.session; import javax.websocket.server.serverendpoint;  @serverendpoint(value = "/test", configurator = gethttpsessionconfigurator.class) public class testwebsocketendpoint {      private session wssession;     private httpsession httpsession;      @onopen     public void onopen(session session, endpointconfig config){         this.wssession = session;         this.httpsession = (httpsession) config.getuserproperties().get(httpsession.class.getname());         principal userprincipal = session.getuserprincipal();         system.out.println(session.getid() + " has opened connection");          try {             session.getbasicremote().sendtext("connection established");         } catch (ioexception ex) {             ex.printstacktrace();         }     }      /**      * when user sends message server, method intercept message      * , allow react it. message read string.      */     @onmessage     public void onmessage(string message, session session){         system.out.println("message " + session.getid() + ": " + message);         try {             session.getbasicremote().sendtext(message);         } catch (ioexception ex) {             ex.printstacktrace();         }     }      /**      * user closes connection.      *       * note: can't send messages client method      */     @onclose     public void onclose(session session){         system.out.println("session " +session.getid()+" has ended");     } } 

gethttpsessionconfigurator:

import java.security.principal; import java.util.list; import java.util.map;  import javax.servlet.http.httpsession; import javax.websocket.handshakeresponse; import javax.websocket.server.handshakerequest; import javax.websocket.server.serverendpointconfig;  public class gethttpsessionconfigurator extends serverendpointconfig.configurator {     @override     public void modifyhandshake(serverendpointconfig config,                                  handshakerequest request,                                  handshakeresponse response)     {         httpsession httpsession = (httpsession)request.gethttpsession();         map<string, list<string>> map = request.getparametermap();         principal principal = request.getuserprincipal();         config.getuserproperties().put(httpsession.class.getname(),httpsession);     } } 

requestlistener:

import java.security.principal; import java.security.cert.x509certificate;  import javax.servlet.servletrequestevent; import javax.servlet.servletrequestlistener; import javax.servlet.annotation.weblistener; import javax.servlet.http.httpservletrequest;  @weblistener public class requestlistener implements servletrequestlistener {      public void requestdestroyed(servletrequestevent sre) {         // todo auto-generated method stub      }      public void requestinitialized(servletrequestevent sre) {         ((httpservletrequest) sre.getservletrequest()).getsession();         principal p = ((httpservletrequest) sre.getservletrequest()).getuserprincipal();          boolean secure = ((httpservletrequest) sre.getservletrequest()).issecure();         string authtype = ((httpservletrequest) sre.getservletrequest()).getauthtype();          x509certificate[] certs = (x509certificate[]) ((httpservletrequest) sre.getservletrequest()).getattribute("javax.servlet.request.x509certificate");     }  } 

the websocket client standalone application using tootallnate/java-websocket , connecting securely:

import java.io.bufferedreader; import java.io.fileinputstream; import java.io.filenotfoundexception; import java.io.ioexception; import java.io.inputstreamreader; import java.net.uri; import java.net.urisyntaxexception; import java.security.keymanagementexception; import java.security.keystore; import java.security.keystoreexception; import java.security.nosuchalgorithmexception; import java.security.securerandom; import java.security.unrecoverablekeyexception; import java.security.cert.certificate; import java.security.cert.certificateexception; import java.util.enumeration;  import javax.net.ssl.keymanager; import javax.net.ssl.keymanagerfactory; import javax.net.ssl.sslcontext; import javax.net.ssl.sslsocketfactory; import javax.net.ssl.trustmanager; import javax.net.ssl.trustmanagerfactory;  import org.apache.commons.logging.log; import org.apache.commons.logging.logfactory; import org.java_websocket.websocketimpl;  public class testclient {      private static final log log = logfactory.getlog(testclient.class);      public static void main(string[] args) throws urisyntaxexception {         websocketimpl.debug = true;          wsraclient wsraclient = new wsraclient(new uri("wss://localhost:8443/testwebsocket-0.0.1-snapshot/test"));          string keystorefile = "keystore.p12";         string keystorepassword = "keystore";          string truststorefile = "truststore.jks";         string truststorepassword = "truststore";           try {             sslcontext ssl = sslcontext.getinstance("tlsv1.2");              log.info("configuring ssl keystore");             keymanagerfactory kmf = keymanagerfactory.getinstance(keymanagerfactory.getdefaultalgorithm());              keystore store = keystore.getinstance(keystore.getdefaulttype());             log.debug("loading keystore");             store.load(new fileinputstream(keystorefile), keystorepassword.tochararray());             log.debug("number of keystore certificates: " + store.size());             enumeration<string> enumeration = store.aliases();             while(enumeration.hasmoreelements()) {                 string alias = enumeration.nextelement();                 log.debug("alias name: " + alias);                 certificate certificate = store.getcertificate(alias);                 log.debug(certificate.tostring());             }             kmf.init(store, keystorepassword.tochararray());             keymanager[] keymanagers = new keymanager[1];             keymanagers = kmf.getkeymanagers();              log.info("configuring ssl truststore");             trustmanagerfactory tmf = trustmanagerfactory.getinstance(trustmanagerfactory.getdefaultalgorithm());             keystore truststore = keystore.getinstance(keystore.getdefaulttype());             log.debug("loading truststore");             truststore.load(new fileinputstream(truststorefile), truststorepassword.tochararray());             log.debug("number of truststore certificates: " + truststore.size());             enumeration = truststore.aliases();             while(enumeration.hasmoreelements()) {                 string alias = (string)enumeration.nextelement();                 log.debug("alias name: " + alias);                 certificate certificate = truststore.getcertificate(alias);                 log.debug(certificate.tostring());             }             tmf.init(truststore);             trustmanager[] trustmanagers = tmf.gettrustmanagers();              ssl.init(keymanagers, trustmanagers, new securerandom());              sslsocketfactory factory = ssl.getsocketfactory();// (sslsocketfactory) sslsocketfactory.getdefault();              wsraclient.setsocket(factory.createsocket());              wsraclient.connectblocking();              bufferedreader reader = new bufferedreader(new inputstreamreader(system.in));             while ( true ) {                 string line = reader.readline();                 if(line.equals("close")) {                     wsraclient.close();                 } else {                     wsraclient.send(line);                 }             }          } catch (nosuchalgorithmexception e) {             e.printstacktrace();             log.error(e);             system.exit(0);         } catch (keystoreexception e) {             e.printstacktrace();             log.error(e);             system.exit(0);         } catch (certificateexception e) {             e.printstacktrace();             log.error(e);             system.exit(0);         } catch (filenotfoundexception e) {             e.printstacktrace();             log.error(e);             system.exit(0);         } catch (ioexception e) {             e.printstacktrace();             log.error(e);             system.exit(0);         } catch (unrecoverablekeyexception e) {             e.printstacktrace();             log.error(e);             system.exit(0);         } catch (keymanagementexception e) {             e.printstacktrace();             log.error(e);             system.exit(0);         } catch (interruptedexception e) {             e.printstacktrace();             log.error(e);             system.exit(0);         }      }  }