Skip to main content
This topic has been closed for replies.

1 reply

D
dkeith@psasys
Participant
February 7, 2013

If SSL CGI variables are needed for a site with Apache and CF10,

There are some Java Environment variable settings that have to be manually added to an Apache mod_jk.conf file.

Edit the mod_jk.conf file

Add these statements to the “custom environment variables” section:

JkEnvVar CERT_SERVER_SUBJECT

JkEnvVar CERT_SUBJECT

JkEnvVar CERT_SERIALNUMBER

JkEnvVar SSL_CLIENT_CERT

JkEnvVar SSL_CLIENT_S_DN

JkEnvVar SSL_CLIENT_S_DN_CN

JkEnvVar SSL_CLIENT_I_DN

JkEnvVar SSL_CLIENT_M_SERIAL

  Then restart the Apache service and you will be able to reference those CGI variables like we were able to in CF9.

    WolfShade
    WolfShade
    Legend
    June 16, 2016

    Over a year ago, this helped us to troubleshoot this very issue we had when we upgraded to CF10.  Thank you, dkeith@psa.sys!!!

    Meanwhile, I recently added JkEnvVar SSL_CLIENT_S_DN_Email to the list to try to get a user's email address from their CAC.  But the variable cgi.SSL_CLIENT_S_DN_Email was coming back as undefined.  Is there something else that I need to do in order to get a user's email from their CAC credentials?

    V/r,

    ^_^

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices