SSL certificate access with Apache2/fastcgi

Scott Laird
Thu, 14 Jul 2005 18:36:41 -0000

I''m trying to add SSL certificate-based authentication to an existing
Rails application.  I''m running into major problems because I
can''t
find a way to determine *which* certificate was used for
authentication.  With CGI, Apache (2.0.5x) would add environment
variables to tell me about the certificate used, but they don''t seem
to be available with FastCGI.

I can''t use Apache''s "fake basic authentication using
certificate
data" because I need to keep an existing API that already uses basic
authentication for a separate part of the authentication puzzle.

I''ve seen suggestions that the CGI environment variables should be
mirrored in @request or in @cgi.env_table, but I can''t see anything
useful in either of these.

Help?


Scott