Re: [users@httpd] Possible to add edited version of SSL_CLIENT_CERT variable to request header?

2012-04-07 Thread ohaya
Hi, I noticed from the archives that there was response/question fromBobb, Kirth Andre that i missed: Igor, Just out of curiosity. Are you using other .pem files in other location blocks? I'm assuming that that question was actually for me (the OP)... In answer to that: No, I don't have any

Re: [users@httpd] Possible to add edited version of SSL_CLIENT_CERT variable to request header?

2012-04-05 Thread Igor Cicimov
Those lines are part of the PEM certificate without them the cert is not valid. What is the problem on the backend side with this? On Thu, Apr 5, 2012 at 8:27 AM, oh...@cox.net wrote: Hi, I am using Apache (2.2.x) as a proxy. The Apache is enabled for 2-way/client-authenticated SSL. In

Re: [users@httpd] Possible to add edited version of SSL_CLIENT_CERT variable to request header?

2012-04-05 Thread ohaya
Igor, The backend (Weblogic) won't accept/parse it. I am sure, because in one test I did, I had a RequestHeader with a canned PEM string, without them, and that worked. Jim Igor Cicimov icici...@gmail.com wrote: Those lines are part of the PEM certificate without them the cert is not

RE: [users@httpd] Possible to add edited version of SSL_CLIENT_CERT variable to request header?

2012-04-05 Thread Bobb, Kirth Andre (US - Arlington)
Igor, Just out of curiosity. Are you using other .pem files in other location blocks? -Original Message- From: oh...@cox.net [mailto:oh...@cox.net] Sent: Thursday, April 05, 2012 9:07 AM To: users@httpd.apache.org Cc: Igor Cicimov Subject: Re: [users@httpd] Possible to add edited

[users@httpd] Possible to add edited version of SSL_CLIENT_CERT variable to request header?

2012-04-04 Thread ohaya
Hi, I am using Apache (2.2.x) as a proxy. The Apache is enabled for 2-way/client-authenticated SSL. In one situation (in a specific Location section), I need to be able to pass the PEM of the client certificate to the proxied server, with a specific HTTP header name. I've actually