SSL with client certificate verification

[Jun Yoda]

Has anyone tried settting up SSL with client certificate verification on HP-LX? I've setup a web and a mcga compartment. I've also placed a "getenv" CGI in the mcga compartment to display all environment variables that could be used a parameters for executing CGI programs.

The problem is that I can't get SSL_CLIENT_CERT or SSL_SERVERT_CERT to be displayed. I can display standard environment variables such as HTTP_HOST,REMOTE_HOST, ...etc. etc.

I'm wondering if anyone has experienced similar problems. It could be that case that I'm not configuring HP-LX or Apache correctly.

[Hal Rottenberg]

We addressed this with patch HPTL_00023 which has since been superseded by HPTL_00029.

"The HTTPS CGI environment variable is not set to "on" during secure server operation."

http://support1.itrc.hp.com/service/patch/patchDetail.do?patchid=HPTL_00029&context=mv:intellinux:hplx1.0

Hope this helps!

Hal Rottenberg

[Jun Yoda]

Thanks Hal for the reply.

I've applied the latest patch, HPTL_00029. HTTPS is set to "ON". But I still cannot get SSL_CLIENT_CERT or SSL_SERVERT_CERT to be passed onto my CGI. What could be the problem?