turned out to be a configuration gotcha - the SSLOptions should refer to
the ApJServMount, not the physical directory, like this
<ApJServMount /servlets /root
<IfModule mod_ssl.c>
<Location /servlets>
SSLOptions +StdEnvVars +ExportCertData
</Location>
</IfModule>
> greetings,
>
> the environment is apache 1.3.12 + mod_ssl + jserv 1.1.1.
> the problem is that the ssl environment variables don't get exported to
> the servlet.
>
> in http.conf i have put the appropriate SSLOptions directory:
>
> <Directory "/usr/local/apache/cgi-bin">
> SSLOptions +StdEnvVars +ExportCertData
> AllowOverride None
> Options ExecCGI
> </Directory>
>
> <Directory "/usr/local/apache/servlets">
> SSLOptions +StdEnvVars +ExportCertData
> </Directory>
>
> in jserv.conf i've put
>
> ApJServEnvVar SSL_CLIENT_CERT org.apache.jserv.ssl_client_cert
>
> the cgi script gets all the ssl headers, as expected but the servlet
> does not.. although i don't know a great deal about apache programming i
> looked at the jserv_ajpv12.c file and found out that the ssl variables
> are not in the cfg->envvars table, which only contains these
>
> DOCUMENT_ROOT,
> HTTP_ACCEPT
> HTTP_ACCEPT_CHARSET
> HTTP_ACCEPT_ENCODING
> HTTP_ACCEPT_LANGUAGE
> HTTP_CONNECTION
> HTTP_HOST
> HTTP_USER_AGENT
> HTTPS
> PATH
> REMOTE_ADDR
> REMOTE_PORT
> SCRIPT_FILENAME
> SERVER_ADDR
> SERVER_ADMIN
> SERVER_NAME
> SERVER_PORT
> SERVER_SIGNATURE
> SERVER_SOFTWARE
>
> yet, mod_ssl seems to insert the ssl variables into the environment,
> which is also confirmed by them being accessible from cgi scripts.
>
> i've been tryign to figure out what is wrong since yesterday. does it
> have to do with module load ordering? i tried to load mod_jserv before
> and after mod_ssl but it seem not to matter.
> any suggestion where to look would be highly appreciated, and i hope i'm
> posting to the right lists. tia,
>
> -a
--
Aaron Stromas | "Tick-tick-tick!!!... ja, Pantani is weg...."
Oracle Corp. | BRTN commentator,
+1 703 708 6821 | L'Alpe d'Huez, 1995 Tour de France
--
----------------------------------------------------------
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
Archives and Other: <http://java.apache.org/main/mail.html>
Problems?: [EMAIL PROTECTED]
