[users@httpd] ssl environment mod_rewrite

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



hi i want to bypass a cgi script via possibly mod_rewrite.

basically i want to forward a ssl client cettificate to a reversed proxied backend, and
this is possible via a cgi script.

but it would be nice if one could do the same for instance via mod_rewrite envirionment
variable or appended to a proxied query string

im was surprised to find that not all environment variables are available in mod_rewrite
(is that correct ?)

but even if i can get to the %{SSL_SERVER_CERT}} i need to escape the newlines in the
value because neither a URL og header value can contain such a character

i have tried things like:
RequestHeader set FORWARD_CERT %{SSL_SERVER_CERT}e

(which will end up with an invalid header because of newlines)

and

RewriteMap    escapeMe    int:escape
RewriteRule ^/.* http://localhost:8080/$1 \
[proxy,last,E=FORWARD_CERT:b${escapeMe:%{SSL_CLIENT_CERT}}]

or

RewriteMap    escapeMe    int:escape
RewriteRule ^/.* \ http://localhost:8080/$1?FORWARD_CERT=${escapeMe:%{SSL_CLIENT_CERT}} \
[proxy,last]


neither works.
anyone have aany idea to do this without a cgi, if possible at all ?

thanks
./allan
Delete | Reply | Reply to All | Forward | Redirect | View Thread | Blacklist | Whitelist | Message Source | Save as | Print | Report as Spam
	Move | Copy 	Back to sent-mail   >



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux