Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of xsdg@google.com designates
 209.85.128.47 as permitted sender)
MIME-Version: 1.0
Date: Wed, 5 Jun 2013 22:23:47 -0700
Message-ID: 
 <CAA8ki2vBsTXvkygS6r=FMn-9q3PYoe+Ck1ASibDphWRXwYpxfw@mail.gmail.com>
Subject: How to get SSL connection information from Apache HTTPD over AJP?
From: Omari Stephens <xsdg@google.com>
To: users@tomcat.apache.org
Content-Type: text/plain; charset=UTF-8

Howdy, y'all

I'm working on porting a pure java CGI to a servlet.  I'm using Tomcat
6 behind Apache HTTPD 2.2.

At this point, I have everything talking to each other fine.  When I
hit the right URL on httpd, my servlet gets run.  yay.

My question: incoming connections to httpd are over SSL.  For the CGI,
apache sets user-identifying information in the environment, so that I
can read a particular environment variable and uniquely identify the
user making the request.

So far, I can't figure out how to uniquely identify the user from the
Tomcat side.  All of the obvious methods (like #getRemoteUser()) from
HttpServletRequest return null.  I see "JkEnvVar" at
http://tomcat.apache.org/connectors-doc/webserver_howto/apache.html,
but either that only copies variables from Apache's environment
(rather than ones that it sets for CGI), or I'm not using it
correctly.

Lastly, I'm not hitting Tomcat SSL directly because I depend on a
module that only exists for Apache HTTPD.

Thanks,
--xsdg

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org