[Mono-bugs] [Bug 78740][Maj] Changed - Https Client Certificate doesn't work with mod_mono apache

Fri Jun 30 12:09:59 EDT 2006

Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by informatique.internet at fiducial.fr.

http://bugzilla.ximian.com/show_bug.cgi?id=78740

--- shadow/78740	2006-06-30 11:59:19.000000000 -0400
+++ shadow/78740.tmp.19302	2006-06-30 12:09:59.000000000 -0400
@@ -112,6 +112,117 @@
 Additional comment
 I know that client certificate should work only with xsp... But mono guys
 said at mono 1.1.9 release that it should work in apache soon!!?!!
 
 
 Thanks
+
+------- Additional Comments From informatique.internet at fiducial.fr  2006-06-30 12:09 -------
+if I run the printenv test script i get all server variable including
+ssl's one :
+
+printenv :
+
+
+#!/usr/bin/perl
+##
+##  printenv -- demo CGI program which just prints its environment
+##
+
+print "Content-type: text/plain\n\n";
+foreach $var (sort(keys(%ENV))) {
+    $val = $ENV{$var};
+    $val =~ s|\n|\\n|g;
+    $val =~ s|"|\\"|g;
+    print "${var}=\"${val}\"\n";
+}
+
+result of printenv :
+DOCUMENT_ROOT="/var/www/localhost/htdocs"
+GATEWAY_INTERFACE="CGI/1.1"
+HTTPS="on"
+HTTP_ACCEPT="text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5"
+HTTP_ACCEPT_CHARSET="ISO-8859-1,utf-8;q=0.7,*;q=0.7"
+HTTP_ACCEPT_ENCODING="gzip,deflate"
+HTTP_ACCEPT_LANGUAGE="fr-fr,fr;q=0.8,en;q=0.5,en-us;q=0.3"
+HTTP_CACHE_CONTROL="max-age=0"
+HTTP_CONNECTION="keep-alive"
+HTTP_COOKIE="ASPSESSION=77490FE15F47C62C9968EDD2"
+HTTP_HOST="localhost"
+HTTP_KEEP_ALIVE="300"
+HTTP_USER_AGENT="Mozilla/5.0 (X11; U; Linux i686; fr-FR; rv:1.8.0.4)
+Gecko/20060508 Firefox/1.5.0.4"
+PATH="/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin"
+QUERY_STRING=""
+REMOTE_ADDR="127.0.0.1"
+REMOTE_PORT="52369"
+REQUEST_METHOD="GET"
+REQUEST_URI="/cgi-bin/printenv"
+SCRIPT_FILENAME="/var/www/localhost/cgi-bin/printenv"
+SCRIPT_NAME="/cgi-bin/printenv"
+SCRIPT_URI="https://localhost/cgi-bin/printenv"
+SCRIPT_URL="/cgi-bin/printenv"
+SERVER_ADDR="127.0.0.1"
+SERVER_ADMIN="root at localhost"
+SERVER_NAME="localhost"
+SERVER_PORT="443"
+SERVER_PROTOCOL="HTTP/1.1"
+SERVER_SIGNATURE="<address>Apache Server at localhost Port
+443</address>\n"
+SERVER_SOFTWARE="Apache"
+SSL_CIPHER="DHE-RSA-AES256-SHA"
+SSL_CIPHER_ALGKEYSIZE="256"
+SSL_CIPHER_EXPORT="false"
+SSL_CIPHER_USEKEYSIZE="256"
+SSL_CLIENT_A_KEY="rsaEncryption"
+SSL_CLIENT_A_SIG="md5WithRSAEncryption"
+SSL_CLIENT_CERT="-----BEGIN
+CERTIFICATE-----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\naGQm3a5jvGdbGIL3n50iLDH5s/znOePmt2cIohDl9P8Ui/sRkhHoZm8t\n-----END
+CERTIFICATE-----\n"
+SSL_CLIENT_I_DN="/C=FR/ST=Rhone/L=
+Lyon/O=Fiducial/OU=Intranet/CN=hublinux/emailAddress=informatique.internet at fiducial.fr"
+SSL_CLIENT_I_DN_C="FR"
+SSL_CLIENT_I_DN_CN="hublinux"
+SSL_CLIENT_I_DN_Email="informatique.internet at fiducial.fr"
+SSL_CLIENT_I_DN_L=" Lyon"
+SSL_CLIENT_I_DN_O="Fiducial"
+SSL_CLIENT_I_DN_OU="Intranet"
+SSL_CLIENT_I_DN_ST="Rhone"
+SSL_CLIENT_M_SERIAL="C86BAB5A89F2606D"
+SSL_CLIENT_M_VERSION="1"
+SSL_CLIENT_S_DN="/C=FR/ST=Some-State/O=Internet Widgits Pty Ltd/CN=Hubert"
+SSL_CLIENT_S_DN_C="FR"
+SSL_CLIENT_S_DN_CN="Hubert"
+SSL_CLIENT_S_DN_O="Internet Widgits Pty Ltd"
+SSL_CLIENT_S_DN_ST="Some-State"
+SSL_CLIENT_VERIFY="SUCCESS"
+SSL_CLIENT_V_END="Nov 15 14:57:29 2033 GMT"
+SSL_CLIENT_V_START="Jun 30 14:57:29 2006 GMT"
+SSL_PROTOCOL="TLSv1"
+SSL_SERVER_A_KEY="rsaEncryption"
+SSL_SERVER_A_SIG="md5WithRSAEncryption"
+SSL_SERVER_CERT="-----BEGIN
+CERTIFICATE-----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\n-----END
+CERTIFICATE-----\n"
+SSL_SERVER_I_DN="/C=FR/ST=Rhone/L=
+Lyon/O=Fiducial/OU=Intranet/CN=hublinux/emailAddress=informatique.internet at fiducial.fr"
+SSL_SERVER_I_DN_C="FR"
+SSL_SERVER_I_DN_CN="hublinux"
+SSL_SERVER_I_DN_Email="informatique.internet at fiducial.fr"
+SSL_SERVER_I_DN_L=" Lyon"
+SSL_SERVER_I_DN_O="Fiducial"
+SSL_SERVER_I_DN_OU="Intranet"
+SSL_SERVER_I_DN_ST="Rhone"
+SSL_SERVER_M_SERIAL="C67D77BDE9845B45"
+SSL_SERVER_M_VERSION="1"
+SSL_SERVER_S_DN="/C=FR/ST=Some-State/L=Lyon/O=Fiducial/CN=10.69.100.164"
+SSL_SERVER_S_DN_C="FR"
+SSL_SERVER_S_DN_CN="10.69.100.164"
+SSL_SERVER_S_DN_L="Lyon"
+SSL_SERVER_S_DN_O="Fiducial"
+SSL_SERVER_S_DN_ST="Some-State"
+SSL_SERVER_V_END="Nov 15 14:53:46 2033 GMT"
+SSL_SERVER_V_START="Jun 30 14:53:46 2006 GMT"
+SSL_SESSION_ID="27F1C328491FB94DB56F9258D383BE90F4AB995E1967C5FE9624E037006686A9"
+SSL_VERSION_INTERFACE="mod_ssl/2.0.58"
+SSL_VERSION_LIBRARY="OpenSSL/0.9.7e"
+
