You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@tomcat.apache.org by Stefan Zasada <st...@ucl.ac.uk> on 2006/03/17 13:36:18 UTC

SSL/CGI variables question

Apologies if this has been asked before:

I'm trying to run a perl cgi script in a standalone tomcat container
with ssl turned on.

With the script running under apache, an environment variable
(SSL_CLIENT_S_DN) is set with the DN from the connecting client's
certificate.

Is is possible to pick up a similar environment variable with the cgi
script running under tomcat? I've looked at the list of cgi variables
that are set and it isn't amongst them.

I've looked around for a way to do this but can't seem to find anything.
Any help would be appreciated.

Stefan.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Re: SSL/CGI variables question

Posted by Mark Thomas <ma...@apache.org>.
Stefan Zasada wrote:
> I'm trying to run a perl cgi script in a standalone tomcat container
> with ssl turned on.
It is usually a good idea to mention your Tomcat version although in
this case it doesn't change the answer.

> With the script running under apache, an environment variable
> (SSL_CLIENT_S_DN) is set with the DN from the connecting client's
> certificate.
> 
> Is is possible to pick up a similar environment variable with the cgi
> script running under tomcat? I've looked at the list of cgi variables
> that are set and it isn't amongst them.
The best you are going to get is REMOTE_USER and how that is populated
under SSL depends on how your realm is configured.

> I've looked around for a way to do this but can't seem to find anything.
> Any help would be appreciated.
If you need this, patching the CGIServlet should be easy. If you get a
patch that works, I would be happy to review it for inclusion in the
standard Tomcat CGI Servlet.

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org