mod_ssl: Failed to set r->user to 'SSL_CLIENT_S_DN_Email'

[Knacktus <knacktus@xxxxxxxxxxxxxx>]

Hi all,

I'm using mod_ssl to authenticate user by a client certificate. The certificate contains the E-Mail address as subject alternative name:

...
        X509v3 extensions:
            X509v3 Subject Alternative Name:
                email:joe.johnson@xxxxxxx
...

mod_ssl is configured as

...
SSLOptions +StdEnvVars +ExportCertData
SSLUserName SSL_CLIENT_S_DN_Email
...

The documentation says: ...

x509 specifies a component of an X.509 DN; one of C,ST,L,O,OU,CN,T,I,G,S,D,UID,Email.

Now, in my case, the subject DN itself is only:

DC=JOJO, CN=JOHNSON JOE SOME_ABBREVATION SOME_NUMBER

Any ideas of how to extract the E-Mail Adresse from the X509v3 extension an map it to th SSLUserName?

Cheers,

Jan