Graham Leggett wrote: > Hi all, > > https://httpd.apache.org/docs/trunk/mod/mod_ssl.html#envvars described how we > might query many of the parameters in the current certificate, however I have > a need to query parameters in parent certificates in the chain, not just the > primary certificate. > > Most specifically, I am after the DN of the root certificate in the chain, > which in the past was the issuer in the client certificate, but in an > environment with intermediate certs this is no longer valid. > > Would a syntax like this make some sense? > > SSL_CLIENT_S_DN_n - Give me the subject DN of the nth certificate in the > chain. > SSL_CLIENT_S_DN_x509_n - Give me the element of the subject DN of the nth > certificate in the chain.
+1 Regards Rüdiger
