topic Re: SSL with client certificate verification in Secure OS Software for Linux

SSL with client certificate verification

Jun Yoda — Fri, 16 Aug 2002 01:35:07 GMT

Has anyone tried settting up SSL with client certificate verification on HP-LX? I've setup a web and a mcga compartment. I've also placed a "getenv" CGI in the mcga compartment to display all environment variables that could be used a parameters for executing CGI programs.

The problem is that I can't get SSL_CLIENT_CERT or SSL_SERVERT_CERT to be displayed. I can display standard environment variables such as HTTP_HOST,REMOTE_HOST, ...etc. etc.

I'm wondering if anyone has experienced similar problems. It could be that case that I'm not configuring HP-LX or Apache correctly.

Re: SSL with client certificate verification

Hal Rottenberg — Mon, 19 Aug 2002 12:39:17 GMT

We addressed this with patch HPTL_00023 which has since been superseded by HPTL_00029.

"The HTTPS CGI environment variable is not set to "on" during secure server operation."

http://support1.itrc.hp.com/service/patch/patchDetail.do?patchid=HPTL_00029&context=mv:intellinux:hplx1.0

Hope this helps!

Hal Rottenberg

Re: SSL with client certificate verification

Jun Yoda — Thu, 22 Aug 2002 09:12:24 GMT

Thanks Hal for the reply.

I've applied the latest patch, HPTL_00029. HTTPS is set to "ON". But I still cannot get SSL_CLIENT_CERT or SSL_SERVERT_CERT to be passed onto my CGI. What could be the problem?