Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (herse.apache.org: domain of pete.lucuk@ngc.com designates
 208.12.122.34 as permitted sender)
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
Date: Mon, 27 Nov 2006 10:03:51 -0500
Message-ID: <52F6AB54F39902489F13FEB65D9EB56D01840368@XMBV4801.northgrum.com>
In-Reply-To: <45664CA4.1090607@t-online.de>
Thread-Topic: [users@httpd] How to send WHOLE SSL_CLIENT_CERT in reverse
 proxy?
Thread-Index: AccPaRp4IdCSfy/JSyWS4pOnwkuF2gCywN7A
From: "Lucuk, Pete" <pete.lucuk@ngc.com>
To: <users@httpd.apache.org>
Subject: RE: [users@httpd] How to send WHOLE SSL_CLIENT_CERT in reverse proxy?

Where would I put the Rewrite escape function in the stuff below?  I
tried a couple different things and could not get it to work.  Thank you
for your help, I appreciate it


RewriteCond %{SSL:SSL_CLIENT_CERT} (.*)
RewriteRule .* - [E=3DSSLCC:%1]
RequestHeader add X-SSL-Client-Cert %{SSLCC}e

RewriteRule ^/https(.*)$
https://kftcsu14.ftc.lab:48605/servlets-examples/servlet/RequestHeaderEx
ample$1 [P,L]=20


>-----Original Message-----
>From: Max Dittrich [mailto:max.dittrich@t-online.de]=20
>Sent: Thursday, November 23, 2006 8:37 PM
>To: users@httpd.apache.org
>Subject: Re: [users@httpd] How to send WHOLE SSL_CLIENT_CERT=20
>in reverse proxy?
>
>Lucuk, Pete schrieb:
>> The backend server is a 3.x version of Jboss that uses Jetty as the=20
>> Servlet engine.
>> Can you use AJP with Jetty?
>>=20
>> If not, is there some simple way to yank out the new lines in=20
>> SSL_CLIENT_CERT on the reverse proxy?
>
>I just looked up the Apache Docs, because I remembered those=20
>internal RewriteMaps. Maybe there's a chance using the=20
>internal RewriteMap 'escape' to encode special characters like "\n".
>
>Limitations on the accepted length of headers (2048) may break=20
>this solution.
>
>hf,
>.max
>
>
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP=20
>Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org