You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2014/02/03 13:06:54 UTC
[Bug 56102] New: SSL_CLIENT_S_DN_x509_0 is undefined
https://issues.apache.org/bugzilla/show_bug.cgi?id=56102
Bug ID: 56102
Summary: SSL_CLIENT_S_DN_x509_0 is undefined
Product: Apache httpd-2
Version: 2.4.6
Hardware: PC
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_ssl
Assignee: bugs@httpd.apache.org
Reporter: willy.weisz@univie.ac.at
CC: willy.weisz@univie.ac.at
According to the description for mod_ssl multiple occurrences of x509
components are returned with a "_n" suffix, with n starting at 0. The
description also explicitly states that both forms ..._x509 and ..._x509_0
return the same value, the first ..._x509 attribute value.
My issue was that SSL_CLIENT_S_DN_OU returned the correct value, but
SSL_CLIENT_S_DN_OU_0 was undefined.
Providing ..._x509_0 provides allows to write compact code when scanning
through multiple same name attributes, whereas the present situation forces one
to single out the first component.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 56102] SSL_CLIENT_S_DN_x509_0 is undefined in the environment
table
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56102
--- Comment #3 from Joe Orton <jo...@redhat.com> ---
^ export all the DN components *twice*.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 56102] SSL_CLIENT_S_DN_x509_0 is undefined in the environment
table
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56102
Willy Weisz <wi...@univie.ac.at> changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|SSL_CLIENT_S_DN_x509_0 is |SSL_CLIENT_S_DN_x509_0 is
|undefined |undefined in the
| |environment table
--- Comment #1 from Willy Weisz <wi...@univie.ac.at> ---
Sorry: The description of mod_ssl is correct in that it says that no _0
variable is available in the environment table. But the fact remains that
apache scripts (e.g. in PHP) can't access a variable _0, contrary to what
apache itself can do in its configuration files (e.g. in requirement
statements).
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 56102] SSL_CLIENT_S_DN_x509_0 is undefined in the environment
table
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56102
KEITA YABU <sh...@me.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
OS|Linux |Mac OS X 10.9
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 56102] SSL_CLIENT_S_DN_x509_0 is undefined in the environment
table
Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56102
--- Comment #2 from Joe Orton <jo...@redhat.com> ---
It would be expensive to have mod_ssl export all the DN components. If the
problem here is specifically with PHP, the right thing to do is to create a
hook in the mod_php SAPI so it can make ssl_var_lookup() available to PHP
scripts directly - that should be very very simple.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org