Not much yet...

subprojects/replication/src/main/java/com/trifork/stamdata/replication/security/ssl/SslSecurityManager.java

@@ -0,0 +1,18 @@
+package com.trifork.stamdata.replication.security.ssl;
+
+import java.security.cert.X509Certificate;
+
+import javax.servlet.http.HttpServletRequest;
+
+import com.trifork.stamdata.replication.security.SecurityManager;
+
+public class SslSecurityManager implements SecurityManager {
+
+	@Override
+	public boolean authorize(HttpServletRequest request) {
+		X509Certificate[] certificateFromHeader = (X509Certificate[]) request.getAttribute("javax.servlet.request.X509Certificate");
+
+		return false;
+	}
+
+}

subprojects/replication/src/test/java/com/trifork/stamdata/replication/security/ssl/SslSecurityManagerTest.java

@@ -0,0 +1,35 @@
+package com.trifork.stamdata.replication.security.ssl;
+
+import java.security.cert.X509Certificate;
+
+import javax.servlet.http.HttpServletRequest;
+
+import org.junit.Before;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.mockito.Mock;
+import org.mockito.runners.MockitoJUnitRunner;
+import static org.mockito.Mockito.*;
+
+@RunWith(MockitoJUnitRunner.class)
+public class SslSecurityManagerTest {
+	@Mock X509Certificate certificate;
+	@Mock HttpServletRequest request;
+	SslSecurityManager securityManager;
+
+	@Before
+	public void before() {
+		when(request.getAttribute("javax.servlet.request.X509Certificate")).thenReturn(new X509Certificate[] {certificate});
+		securityManager = new SslSecurityManager();
+	}
+
+	@Test
+	public void rejectsClientWithUnknownCvr() {
+
+	}
+
+	@Test
+	public void acceptsClientWithKnownCvr() {
+
+	}
+}