Support for Client Certificates about mod_wsgi-docker HOT 11 CLOSED

Can you drop the link for the gist you are talking about here? I can't quickly find it right now.

from mod_wsgi-docker.

One issue may be that although mod_wsgi-express has a section for generating:

SSLOptions +StdEnvVars

I can't see how the generation gets enabled. It may be a bug or something I didn't complete.

You can try creating a file httpd-ssl.conf and in it add:

SSLOptions +StdEnvVars

and then use the:

--include-file httpd-ssl.conf

option.

Am not sure whether this will work though as will be outside of the VirtualHost and not in it where SSL is setup.

from mod_wsgi-docker.

The gist is https://gist.github.com/GrahamDumpleton/b79d336569054882679e

from mod_wsgi-docker.

Were you able to try the --include-file workaround?

from mod_wsgi-docker.

I gave it a quick try and it didn't work, but that may have been due to another problem. For the moment I'm going to use a client token instead of client certs. When I have everything else working I may retry client certs.

from mod_wsgi-docker.

Can you confirm my interpretation of the issue, that is that the SSL_CLIENT_CERT variable isn't being passed in the WSGI environ dictionary? Or is the issue something else?

I will try and fix the issue I did see this weekend. I have been travelling doing training during the week and doing the same next week, so a little busy.

from mod_wsgi-docker.

BTW, you could also add the option --setup-only when you run start-server. This will not actually start the server, but just generate the config.

Then go into the httpd.conf file that was generated and change:

<IfDefine MOD_WSGI_SSL_ENVIRONMENT>
SSLOptions +StdEnvVars
</IfDefine>

to:

#<IfDefine MOD_WSGI_SSL_ENVIRONMENT>
SSLOptions +StdEnvVars
#</IfDefine>

Then run:

./apachectl start

in the directory of generated files.

This will start it up in background.

Test it, then run:

./apachectl stop

As I said, wasn't sure whether what I gave you would work if outside of the VirtualHost.

from mod_wsgi-docker.

Actually, I am an idiot and can't read my own code properly.

Just add the option:

--ssl-environment

That will result in variables being passed through for SSL to WSGI environ.

from mod_wsgi-docker.

@eomeara Did you resolve your issue?

from mod_wsgi-docker.

from mod_wsgi-docker.

Okay. I will close this issue then.

from mod_wsgi-docker.