Re: Problem with Apache CGI enviroment variables via PL/SQL Gateway Module

From: Frank <fvanbortel_at_netscape.net>
Date: Sun, 19 Jan 2003 21:18:53 +0100
Message-ID: <3E2B082D.1000706_at_netscape.net>


Plamen Baruh wrote:
> Hello!
>
> I am trying to get the certificate data information, which is exported
> by mod_ssl Apache module as environment variables(of course if the
> client has initiated a https session and had authorised himself with
> his certificate), ie SSL_CLIENT_CERT and etc. I tried to access the
> variables via owa_util.get_cgi_env('SSL_CLIENT_CERT') but it did not
> returned any data. After printing all variables with
> owa_util.print_cgi_env none of SSL related variables did not show up.
> So the question is: How to access these variables under PL/SQL?
> I read about passing by a perl cgi for example, which does not have
> any problems and after that it to pass the needed data as parameter to
> PL/SQL stored procedure, but it is too insecure and infact does not
> solve the problem but walks around it...
> Additional Ref: I tried this both in Oracle8i and Oracle 9i AS, does
> not work
>
> Any help will be much appreciated!

If it's a Verisign Certificate, I've had the same... Those certificaes are only half - the part they depend on is stored within many browsers. Unfortunately, the Java SSL engine is not a browser... You should be able to get the exact error by looking in the logs (SSL logs) on the web server.
You will need to have a cascading (parent) certificate as well. You can export these from e.g. IE, Netscape. Do not have access to the site where I have done that, so cannot give details.

Hth, Frank Received on Sun Jan 19 2003 - 21:18:53 CET

Original text of this message