Re: JkExtractSSL not sending SSL information to tomcat

2011-05-27 Thread Rainer Jung
On 25.05.2011 15:18, Christopher Schultz wrote: > André, > > On 5/24/2011 7:13 PM, André Warnier wrote: >> Christopher Schultz wrote: >>> -BEGIN PGP SIGNED MESSAGE- >>> Hash: SHA1 >>> >>> Marc, >>> >>> On 5/24/2011 10:56 AM, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 5/24/2011 7:13 PM, André Warnier wrote: > Christopher Schultz wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Marc, >> >> On 5/24/2011 10:56 AM, Marc Boorshtein wrote: >>> I've setup a pretty generic httpd(2.2.19)+mod_jk to

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the http

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 5:37 PM, Christopher Schultz wrote: > Looking at the mod_jk code, it appears that the only variables that are > included by using JkExtractSSL are those shown above. If you want more, > you'll have to use JkEnvVar. > > I can confir

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 5:20 PM, Christopher Schultz wrote: > On 5/24/2011 4:59 PM, Christopher Schultz wrote: >> Instead, they are stored in the request /attributes/. > > Specifically, these: > > javax.servlet.request.cipher_suite - as a String > javax.

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 4:59 PM, Christopher Schultz wrote: > Instead, they are stored in the request /attributes/. Specifically, these: javax.servlet.request.cipher_suite - as a String javax.servlet.request.key_size - as an Integer javax.servlet.req

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: > I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle > Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the > correct SSLOptions in the httpd configuration files.

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 4:13 PM, Marc Boorshtein wrote: >> Marc, >> >> On 5/24/2011 11:39 AM, Marc Boorshtein wrote: >>> SSLOptions +StdEnvVars >>> SSLOptions +ExportCertData >>> >>> JkExtractSSL On >>> >>> >> >> I'm not entirely sure about the JkExtractS

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
> Marc, > > On 5/24/2011 11:39 AM, Marc Boorshtein wrote: >> SSLOptions +StdEnvVars >> SSLOptions +ExportCertData >> >> JkExtractSSL On >> >> > > I'm not entirely sure about the JkExtractSSL option, but some other > mod_jk options are not copied into all virtual hosts. You might want to > try movi

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 11:39 AM, Marc Boorshtein wrote: > SSLOptions +StdEnvVars > SSLOptions +ExportCertData > > JkExtractSSL On > > I'm not entirely sure about the JkExtractSSL option, but some other mod_jk options are not copied into all virtual ho

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
> > And your SSLOptions are what exactly? > > Also Tomcat and mod_jk version info might be relevant. > oadModulejk_module modules/mod_jk.so LoadFile "/home/sys/ssl-poc/webgate/access/oblix/lib/libgcc_s.so.1" LoadFile "/home/sys/ssl-poc/webgate/access/oblix/lib/libstdc++.so.5" SSLOptions +St

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Mark Thomas
On 24/05/2011 15:56, Marc Boorshtein wrote: > I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle > Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the > correct SSLOptions in the httpd configuration files. And your SSLOptions are what exactly? Also Tomcat and m

JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the httpd configuration files. I can see the SSL environment variables in /cgi-bin/printenv but no headers or environment variables in th