Copy link to clipboard
Copied
This question was posted in response to the following article: http://help.adobe.com/en_US/ColdFusion/10.0/CFMLRef/WSc3ff6d0ea77859461172e0811cbec22c24-7785.html
Copy link to clipboard
Copied
If SSL CGI variables are needed for a site with Apache and CF10,
There are some Java Environment variable settings that have to be manually added to an Apache mod_jk.conf file.
Edit the mod_jk.conf file
Add these statements to the “custom environment variables” section:
JkEnvVar CERT_SERVER_SUBJECT
JkEnvVar CERT_SUBJECT
JkEnvVar CERT_SERIALNUMBER
JkEnvVar SSL_CLIENT_CERT
JkEnvVar SSL_CLIENT_S_DN
JkEnvVar SSL_CLIENT_S_DN_CN
JkEnvVar SSL_CLIENT_I_DN
JkEnvVar SSL_CLIENT_M_SERIAL
Then restart the Apache service and you will be able to reference those CGI variables like we were able to in CF9.
Copy link to clipboard
Copied
Over a year ago, this helped us to troubleshoot this very issue we had when we upgraded to CF10. Thank you, dkeith@psa.sys!!!
Meanwhile, I recently added JkEnvVar SSL_CLIENT_S_DN_Email to the list to try to get a user's email address from their CAC. But the variable cgi.SSL_CLIENT_S_DN_Email was coming back as undefined. Is there something else that I need to do in order to get a user's email from their CAC credentials?
V/r,
^_^