Hi,
I am using JBoss AS 7.0.13 and i have configured client cert authentication. My question is how do i invalidate SSL session(request.getSession.invalidate() doesn't work) so that browser prompts for certificate selection in case of CLIENT-CERT auth method?. Currently, the browser doesn't prompt for client certificate when I access the url again. The browser asks for the client cert only when i restart the browser.
Thanks,
kumaran