Tim wrote:
> 
> > When you really want to patch this into mod_ssl you can insert it into
> > ssl_hook_Auth() where similar things are already done for the faked Basic Auth
> > facility.  OTOH you can also write a stand-alone mod_foobar.c which creates
> > such variables in it's own API auth hook.

Well, I acted on the first suggestion and tried modifying
ssl_hook_Auth() in ssl_engine_kernel.c and recompiling.  Voila, a
segmentation fault!  But what I don't fully understand is why this
change:

*** perl_dev/ssl_engine_kernel.c        1999/05/19 15:02:50     1.5
--- perl_dev/ssl_engine_kernel.c        1999/05/19 15:03:20     1.6
***************
*** 1012,1017 ****
--- 1012,1020 ----
      NULL
  };
  
+ static const char *cn = "SSL_CLIENT_S_DN_CN";
+ static const char *ru = "REMOTE_USER";
+ 
  int ssl_hook_Fixup(request_rec *r)
  {
      SSLSrvConfigRec *sc = mySrvConfig(r->server);
***************
*** 1036,1041 ****
--- 1039,1049 ----
      for (i = 0; ssl_hook_Fixup_vars[i] != NULL; i++) {
          var = (char *)ssl_hook_Fixup_vars[i];
          val = ssl_var_lookup(r->pool, r->server, r->connection, r,
var);
+         if (!strIsEmpty(val))
+             ap_table_set(e, var, val);
+       var = (char *)cn; 
+       val = ssl_var_lookup(r->pool, r->server, r->connection, r, var);
+       var = (char *)ru; 
          if (!strIsEmpty(val))
              ap_table_set(e, var, val);
      }

in ssl_hook_Fixup(request_rec *r) causes a segfault.  Anyone want to
enlighten me?  
It seems silly to think about adding a per-directory option if I can't
get this to compile.

The errors I get are always at runtime, which makes life a bit tougher,
ya know? ;-)

-- 
  "It is better to ask some of the questions 
   than to know all of the answers."
                                     --James Thurber
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to