----------------------------------------------------------------
BEFORE YOU POST, search the faq at <http://java.apache.org/faq/>
WHEN YOU POST, include all relevant version numbers, log files,
and configuration files.  Don't make us guess your problem!!!
----------------------------------------------------------------


Jean-Luc Rochat wrote:
> 
> Hi,
> 
> NB: you are using ajpv11 protocol (JServ version older than 1.1b3). No ?

Good question! These apps are running in a production environment so I
do not upgrade frequently unless there is some bug or new functionality
I really need. However a strings mod_jserv.so reveals

        <meta name="GENERATOR" CONTENT="Apache JServ 1.0b3">

Since it was a long time ago I looked at JServ source, please tell me
if the solution I used was the wrong one and it worked just by chance.

> I'll (or Michal will, who makes it is not important), add the
> SSL_CLIENT_DN to the ajpv12 protocol (that's maybe a dirty hack, but we
> need it. I hope I'll have time to do a better job soon). Other variables
> could be needed later (expiration date, ciphers, etc ...). I think that
> people who need this will have the knowledge to patch the source code
> ;-) (again, it's a quick & dirty hack).
> 
> I don't want to send every SSL env var all the time. Probably client
> authent is 99.99% the need.

One that is certainly useful, well at least I used it a lot with snacc4java,
is the whole certificate in B64 format. With that you can anything you
will ever need.

> NB that I don't have a SSL_CLIENT_S_DN variable here as I use a
> compatibility mode in mod_ssl that sends SSL_CLIENT_DN instead.
> only adding :
> 
> SSLOptions +ExportCertData +CompatEnvVars

It has been a long time since I set up Apache + mod_ssl so I don't
remember the use of +CompatEnvVars. Also some of my SSL based apps
were migrated from NS 3.5.1 that has very limited servlet support.

e.

========================================================================
Enrico Badella                       email:   [EMAIL PROTECTED]
Soft*Star srl                                 [EMAIL PROTECTED]
InterNetworking Specialists          tel:     +39-011-746092            
Via Camburzano 9                     fax:     +39-011-746487
10143 Torino, Italy

  Wanted, for hobbyist use, any type of PDP and microVAX hardware,software,
  manuals,schematics,etc. and DEC-10 docs or manuals
==========================================================================


--
--------------------------------------------------------------
Please read the FAQ! <http://java.apache.org/faq/>
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Archives and Other:  <http://java.apache.org/main/mail.html>
Problems?:           [EMAIL PROTECTED]

Reply via email to