Skip to content

Conversation

@geraldraaf
Copy link

i have changed (tested with apache) the code so i can do assignments at the configuration page in dokuwiki for authclientcerts.
The possibilities are as follows.
The 1. sample and code for the PR is the same as from original author.
sample:

http_header_name -> HTTP_X_SSL_CLIENTCERT_BASE64
user name        -> 2.16.840.1.113730.3.1.3
full name        -> subject, CN
email            -> extensions, subjectAltName, email
  1. For this to work you have to change "http_header_name" to SSL_CLIENT_CERT in apache and you need to have SSLOptions +ExportCertData to get the pem encoded Cert.
    sample:
http_header_name -> SSL_CLIENT_CERT
user name        -> subject, UID
full name        -> subject, CN
email            -> extensions, subjectAltName, email
  1. Change "http_header_name" to WEBSRV in apache and you need to have SSLOptions +StdEnvVars for the apache environment variable
    sample:
  http_header_name -> WEBSRV
  user name        -> SSL_CLIENT_S_DN_UID
  full name        -> SSL_CLIENT_S_DN_CN
  email            -> SSL_CLIENT_S_DN_Email

changed source so you can change username email and real name without editing auth.php
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant