Re: JkExtractSSL not sending SSL information to tomcat

2011-05-27 Thread Rainer Jung
On 25.05.2011 15:18, Christopher Schultz wrote: André, On 5/24/2011 7:13 PM, André Warnier wrote: Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-25 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 André, On 5/24/2011 7:13 PM, André Warnier wrote: Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on

JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the httpd configuration files. I can see the SSL environment variables in /cgi-bin/printenv but no headers or environment variables in

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Mark Thomas
On 24/05/2011 15:56, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the httpd configuration files. And your SSLOptions are what exactly? Also Tomcat and

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
And your SSLOptions are what exactly? Also Tomcat and mod_jk version info might be relevant. oadModulejk_module modules/mod_jk.so LoadFile /home/sys/ssl-poc/webgate/access/oblix/lib/libgcc_s.so.1 LoadFile /home/sys/ssl-poc/webgate/access/oblix/lib/libstdc++.so.5 SSLOptions +StdEnvVars

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 11:39 AM, Marc Boorshtein wrote: SSLOptions +StdEnvVars SSLOptions +ExportCertData JkExtractSSL On VirtualHost _default_:9443 I'm not entirely sure about the JkExtractSSL option, but some other mod_jk options are not

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Marc Boorshtein
Marc, On 5/24/2011 11:39 AM, Marc Boorshtein wrote: SSLOptions +StdEnvVars SSLOptions +ExportCertData JkExtractSSL On VirtualHost _default_:9443 I'm not entirely sure about the JkExtractSSL option, but some other mod_jk options are not copied into all virtual hosts. You might want to

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 4:13 PM, Marc Boorshtein wrote: Marc, On 5/24/2011 11:39 AM, Marc Boorshtein wrote: SSLOptions +StdEnvVars SSLOptions +ExportCertData JkExtractSSL On VirtualHost _default_:9443 I'm not entirely sure about the

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the httpd configuration files. I

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 4:59 PM, Christopher Schultz wrote: Instead, they are stored in the request /attributes/. Specifically, these: javax.servlet.request.cipher_suite - as a String javax.servlet.request.key_size - as an Integer

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 5:20 PM, Christopher Schultz wrote: On 5/24/2011 4:59 PM, Christopher Schultz wrote: Instead, they are stored in the request /attributes/. Specifically, these: javax.servlet.request.cipher_suite - as a String

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 5:37 PM, Christopher Schultz wrote: Looking at the mod_jk code, it appears that the only variables that are included by using JkExtractSSL are those shown above. If you want more, you'll have to use JkEnvVar. I can confirm

Re: JkExtractSSL not sending SSL information to tomcat

2011-05-24 Thread André Warnier
Christopher Schultz wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Marc, On 5/24/2011 10:56 AM, Marc Boorshtein wrote: I've setup a pretty generic httpd(2.2.19)+mod_jk to tomcat 6 on Oracle Linux 5 (CentOS 5 equiv) with SSL setup. With JkExtractSSL and the correct SSLOptions in the