Exit
  • Global community
    • Language:
      • Deutsch
      • English
      • Español
      • Français
      • Português
  • 日本語コミュニティ
  • 한국 커뮤니티
0

CGI environment (CGI Scope) variables

Explorer ,
Feb 07, 2013 Feb 07, 2013
957
Translate
Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Beginner ,
Feb 07, 2013 Feb 07, 2013

If SSL CGI variables are needed for a site with Apache and CF10,

There are some Java Environment variable settings that have to be manually added to an Apache mod_jk.conf file.

Edit the mod_jk.conf file

Add these statements to the “custom environment variables” section:

JkEnvVar CERT_SERVER_SUBJECT

JkEnvVar CERT_SUBJECT

JkEnvVar CERT_SERIALNUMBER

JkEnvVar SSL_CLIENT_CERT

JkEnvVar SSL_CLIENT_S_DN

JkEnvVar SSL_CLIENT_S_DN_CN

JkEnvVar SSL_CLIENT_I_DN

JkEnvVar SSL_CLIENT_M_SERIAL

  Then restart the Apache service and you will be able to reference those CGI variables like we were able to in CF9.

Translate
Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Jun 16, 2016 Jun 16, 2016
LATEST

Over a year ago, this helped us to troubleshoot this very issue we had when we upgraded to CF10.  Thank you, dkeith@psa.sys!!!

Meanwhile, I recently added JkEnvVar SSL_CLIENT_S_DN_Email to the list to try to get a user's email address from their CAC.  But the variable cgi.SSL_CLIENT_S_DN_Email was coming back as undefined.  Is there something else that I need to do in order to get a user's email from their CAC credentials?

V/r,

^_^

Translate
Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Resources