Again, CGI environment in Tomcat (was: Re: Tomcat 3.1 and SSL)

[Gunther Schadow <gu...@aurora.rg.iupui.edu>]

Ismael Blesa Part wrote:
> 
> Yes, all you say is good. But do wou know how to access the digital
> certificate from servlets in Tomcat?
> 
> Apache and mod_ssl send it on environment variables, but I am not able
> to get
> them from the servlet.
> 
> do you know how to do it?

Yup, that's exactly the same problem that I am stuck with. I have searched
and I have posted a question, but no answer yet. Here is what I have said
earlier:
 
> I am wondering about how much of the mod_ssl session parameters one can
> (or should) access from Tomcat, JServ or anything behind Ajp12. I have
> seen that the AJP protocol can forward CGI environment variables.  However,
> it is unclear 
> 
> (1) how much of it Apache actually forwards via AJP
> (2) how much the AJP server actually reads and
> (3) where the AJP server makes these variables available to the 
>     servlet or JSP.
> 
> I have searched through the source code and FAQ and I find all kinds of
> pertinent but inconclusive information. There is:
> 
> (A) the tomcat.properties variable: wrapper.env.copyall=true
> 
> (B) the AJP transmitted environment is sometimes put into a 
>     Hashtable env_vars, some of which is then rescued into 
>     other variables, but most of these env_vars received
>     is simply discarded.
> 
> (C) the what appears to be most recent Ajp12ConnectionHandler.java
>     not even collects anything into the env_vars hashtable (is 
>     simply commented out.)
> 
> So, I am wondering about the direction in which we are going and how to
> do these things so that they'll work tomorrow. I mean, I can hack the 
> sourcecode until I have "my" variables passed through, but this doesn't
> seem to be the way everyone should (have to) do it, right?
> 
> Why do we not simply pass all Apache created environment variables 
> through and make them available as Java properties? A matter of 
> speed I suppose ... but could one at least put these variables 
> into the session object? 

And that question still stands, I guess it's for the gurus and hackers
to answer.  I am very confused by looking at the sourcecode of the various
versions of the AJP in various places in the tomcat source. What is the
future of environment variable passing over AJP?

regards
-Gunther

Re: Again, CGI environment in Tomcat (was: Re: Tomcat 3.1 and SSL)

[Ismael Blesa Part <ib...@tissat.es>]

Do you know if it works if using Netscape in stead of Apache?

Gunther Schadow wrote:

> Ismael Blesa Part wrote:
> >
> > Yes, all you say is good. But do wou know how to access the digital
> > certificate from servlets in Tomcat?
> >
> > Apache and mod_ssl send it on environment variables, but I am not able
> > to get
> > them from the servlet.
> >
> > do you know how to do it?
>
> Yup, that's exactly the same problem that I am stuck with. I have searched
> and I have posted a question, but no answer yet. Here is what I have said
> earlier:
>
> > I am wondering about how much of the mod_ssl session parameters one can
> > (or should) access from Tomcat, JServ or anything behind Ajp12. I have
> > seen that the AJP protocol can forward CGI environment variables.  However,
> > it is unclear
> >
> > (1) how much of it Apache actually forwards via AJP
> > (2) how much the AJP server actually reads and
> > (3) where the AJP server makes these variables available to the
> >     servlet or JSP.
> >
> > I have searched through the source code and FAQ and I find all kinds of
> > pertinent but inconclusive information. There is:
> >
> > (A) the tomcat.properties variable: wrapper.env.copyall=true
> >
> > (B) the AJP transmitted environment is sometimes put into a
> >     Hashtable env_vars, some of which is then rescued into
> >     other variables, but most of these env_vars received
> >     is simply discarded.
> >
> > (C) the what appears to be most recent Ajp12ConnectionHandler.java
> >     not even collects anything into the env_vars hashtable (is
> >     simply commented out.)
> >
> > So, I am wondering about the direction in which we are going and how to
> > do these things so that they'll work tomorrow. I mean, I can hack the
> > sourcecode until I have "my" variables passed through, but this doesn't
> > seem to be the way everyone should (have to) do it, right?
> >
> > Why do we not simply pass all Apache created environment variables
> > through and make them available as Java properties? A matter of
> > speed I suppose ... but could one at least put these variables
> > into the session object?
>
> And that question still stands, I guess it's for the gurus and hackers
> to answer.  I am very confused by looking at the sourcecode of the various
> versions of the AJP in various places in the tomcat source. What is the
> future of environment variable passing over AJP?
>
> regards
> -Gunther
>
>   ------------------------------------------------------------------------
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: general-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: general-help@jakarta.apache.org