Using SSL Client Certificates

[AlanMcRae]

I am using HTTPS with Apache and ColdFusion MX7. The Apache server is set up to
require client certificates from a specific CA. I need to find out which client
certificate the user has used. Is it in any way possible to get
CGI.CERT_SUBJECT etc to work with Apache? The notes say only IIS and Netscape.
This should be an easy job, Apache provides many client certificate environment
variables.

[MikerRoo]

If you look at [url]http://httpd.apache.org/docs-2.0/mod/mod_cgi.html[/url], the policy
seems to be "It's not in the moldy old CGI spec, so we won't return it".

It seems that you have to compile certificate stuff in yourself.
It looks like you could add this in mod_nw_ssl.c (Apache 2).

If you learn how, please post some pointers.
I'll do the same -- (so far, my bosses haven't needed this functionality).

Regards,
-- MikeR