environment variables and SSLRequireSSL problem
am 07.10.2002 03:10:17 von Ondrej KrausHello,
I have problem with environment variables and directive SSLRequireSSL.
SSL works, but I cannot test this in php script(_SERVER['HTTPS']) and
SSLRequireSSL directive denies my access to directory, which is accessed
via SSL.
Thank you for any idea.
Ondrej Kraus
related informations:
software versions:
Debian testing dist.
Apache 1.3.6
mod_ssl 2.8.9
OpenSSL 0.9.6g
fragment of httpd.conf:
Listen 80
LoadModule ssl_module /usr/lib/apache/1.3/mod_ssl.so
Port 80
Listen xx.xx.xx.xx:443
NameVirtualHost *:80
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
SSLPassPhraseDialog builtin
SSLSessionCache dbm:/var/run/ssl_scache
SSLSessionCacheTimeout 300
SSLMutex file:/var/run/ssl_mutex
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
ServerName server_name
# this php application could not find HTTPS environment variable
# actual dirty workaround: SetEnv HTTPS on
DocumentRoot /home/app
SSLEngine on
SSLOptions +StdEnvVars
SSLCertificateFile ...
SSLCACertificateFile ...
SSLCertificateKeyFile ...
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
Alias /mydir /home/mydir
# no access, but if I comment it out, it works as expected (with SSL)
SSLRequireSSL
# redirect works
ServerName server_name
Redirect permanent / https://server_name/mydir/
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org