Re: [jakartaee-platform-dev] [servlet-dev] Help please -- Servlet TCK te

[arjan tijms <arjan.tijms@xxxxxxxxx>]

Hi,

On Tue, Mar 2, 2021 at 11:28 PM Stuart Douglas <sdouglas@xxxxxxxxxx> wrote:

Technically I don't think Servlet does need it, it's just the way the TCK is written needs it. AFAIK the spec does not explicitly require support for post handshake auth.

From memory the issue with the TCK is that if you use REQUIRED for the client auth mode and always request certificates some tests will fail that are not expecting an authenticated user, which is why post handshake auth is required.

What you say sounds very reasonable. I last looked into this mid 2019 when setting up the TCK for Payara, and have to admit I'm not 100% sure anymore either which tests exactly required it and which couldn't tolerate it. I guess I just have to experiment a little with it again. Thanks!

Kind regards,

Arjan Tijms