mod_ssl: inserting cert parameters into headers

2010-11-19 Thread Graham Leggett
Hi all, For a while we've been relying on our load balancers to terminate SSL for us, and place details of client certs into HTTP headers before passing a connection backwards (through a further SSL protected connection). We're in a situation where we want to use httpd instead of a load

RE: mod_ssl: inserting cert parameters into headers

2010-11-19 Thread Plüm, Rüdiger, VF-Group
-Original Message- From: Graham Leggett Sent: Freitag, 19. November 2010 14:00 To: dev@httpd.apache.org Subject: mod_ssl: inserting cert parameters into headers Hi all, For a while we've been relying on our load balancers to terminate SSL for us, and place details

Re: mod_ssl: inserting cert parameters into headers

2010-11-19 Thread Graham Leggett
On 19 Nov 2010, at 3:19 PM, Plüm, Rüdiger, VF-Group wrote: Does RequestHeader add some_header %{SSL_ENVIRONMENT_VARIABLE}s not work for you? It could, but it isn't very clean at all. You are adding a KV pair to one table, then manually copying it into another table. If a hook existed to

Re: mod_ssl: inserting cert parameters into headers

2010-11-19 Thread Joe Orton
On Fri, Nov 19, 2010 at 05:17:06PM +0200, Graham Leggett wrote: On 19 Nov 2010, at 3:19 PM, Plüm, Rüdiger, VF-Group wrote: Does RequestHeader add some_header %{SSL_ENVIRONMENT_VARIABLE}s not work for you? It could, but it isn't very clean at all. You are adding a KV pair to one

Re: mod_ssl: inserting cert parameters into headers

2010-11-19 Thread Nick Kew
On Fri, 19 Nov 2010 14:59:35 +0200 Graham Leggett minf...@sharp.fm wrote: Most specifically, if SSLOptions +StdEnvVars is specified, the hook gets called with the data, and an implementation writes them to the subprocess environment, or headers_in, as appropriate (and as configured).

Re: mod_ssl: inserting cert parameters into headers

2010-11-19 Thread Graham Leggett
On 19 Nov 2010, at 6:24 PM, Nick Kew wrote: Most specifically, if SSLOptions +StdEnvVars is specified, the hook gets called with the data, and an implementation writes them to the subprocess environment, or headers_in, as appropriate (and as configured). A hook? That suggests you expect