enrique,
you can use also use tomcat with mod_jk. one catch, you must use the
Ajp13ConnectionHandler, Ajp12ConnectionHandler does not relay the SSl headers. or,
at least, i could not get Ajp12ConnectionHandler to work.
-a
enrique wrote:
> BERWART Thierry wrote:
>
> > Hello
> >
> > I am happy because i had the same problem and now all works! :)
> > and so i think i can help you (I run under Apache 1.3,modssl and Jserv 1.2
> >
> > First what webserver... do you have ?
> >
> > If you have Apache 1.3, Modssl and Jserv you must say to apache that he
> > must send the SSL Variables to JServ.
> >
> > for example :
> > SSLOptions +StdEnvVars +ExportCertData +CompatEnvVars
> >
> > or
> >
> > <Directory "/opt/Applications/apache_1.3.12/servlets">
> > SSLOptions +StdEnvVars +ExportCertData +CompatEnvVars
> > </Directory>
> >
> > After that you must modify you jserv.conf.
> > if you use the ajpv12 protocol,
> > you must say to jserv what variable he must set for the servlets
> > for example :
> >
> > ApJServEnvVar SSL_CLIENT_CERTIFICATE SSL_CLIENT_CERTIFICATE
> > ApJServEnvVar SSL_CLIENT_S_DN_CN SSL_CLIENT_S_DN_CN
> > ApJServEnvVar SSL_CLIENT_M_SERIAL SSL_CLIENT_M_SERIAL
> >
> > And so in your servlet you can do that :
> >
> > String ssl_client_m_serial = (String
> > )req.getAttribute("org.apache.jserv.SSL_CLIENT_M_SERIAL");
> >
> > String ssl_client_s_dn_cn = (String
> > )req.getAttribute("org.apache.jserv.SSL_CLIENT_S_DN_CN");
> >
> > String ssl_client_certificate = (String)
> > req.getAttribute("org.apache.jserv.SSL_CLIENT_CERTIFICATE");
> >
> > Byeee Byeee
> >
> > Good luck !
> >
> > Thierry
> >
> > -----Message d'origine-----
> > De: Enrique Garcia Sancho [mailto:[EMAIL PROTECTED]]
> > Date: dimanche 17 septembre 2000 20:44
> > �: [EMAIL PROTECTED]
> > Objet: Client authentication with SSL
> >
> > Hi!. Does anybody know if there is the possibility to read SSL certificate
> > variables from a servlet?.
> > Thanks a lot.
> >
> > ___________________________________________________________________________
> > To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> > of the message "signoff SERVLET-INTEREST".
> >
> > Archives: http://archives.java.sun.com/archives/servlet-interest.html
> > Resources: http://java.sun.com/products/servlet/external-resources.html
> > LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
> >
> > ___________________________________________________________________________
> > To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> > of the message "signoff SERVLET-INTEREST".
> >
> > Archives: http://archives.java.sun.com/archives/servlet-interest.html
> > Resources: http://java.sun.com/products/servlet/external-resources.html
> > LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
>
> First of all, thanks a lot for your help. You can't imagine how relieved i've
> felt when i've seen an answer to my message.
> But i've still got some doubts.
> I've got Apache1.3.9 with mod_ssl compiled as a built-in module. I was trying
> to use Tomcat as the servlet engine, but because of your answer i'll take
> JServ.
> I've tried to take it from http://java.apache.org/jserv, but its latest
> version is jserv1.1.2. I've also tried to get it making a search, and i've
> found Apache-jserv1.2.5, but it belongs to 1998, and i think that the version
> corresponds to the one of Apache.
> So could you tell me where to find it?. I'd like to add mod_jserv as a dynamic
> module if it's possible.
> Thank you once more.
>
> ___________________________________________________________________________
> To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources: http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
--
Aaron Stromas | "Tick-tick-tick!!!... ja, Pantani is weg..."
Oracle Corp | BRTN commentator
+1 703.708.68.21 | L'Alpe d'Huez
1995 Tour de France
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
