0

我是 apache PKI 证书和 php 的新手。我试图在 $_SERVER 数组 (php) 中找到 SSL_CLIENT_SAN_(email) 环境变量。我可以看到其他 mod_ssl 环境变量,但看不到 SSL_CLIENT_SAN_*。

我正在使用 wamp,如果这有任何影响

有我需要设置的配置吗?

我已经设置了:

SSLOptions +StdEnvVars 
<FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/Apache24ah64/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

我在 $_SERVER 中有以下内容:

[SSL_TLS_SNI] => SOMESERVERURL 
[SSL_SERVER_S_DN_CN] => SOMESERVERURL
[SSL_SERVER_I_DN_O] => Root CA 
[SSL_SERVER_I_DN_OU] => http://www.cacert.org 
[SSL_SERVER_I_DN_CN] => CA Cert Signing Authority 
[SSL_SERVER_I_DN_Email] => support@cacert.org
[SSL_CLIENT_S_DN_C] => US [
[SSL_CLIENT_S_DN_O] => SOMEOGANIZATION
[SSL_CLIENT_S_DN_OU] => ECA 
[SSL_CLIENT_S_DN_OU_1] => SOMECOMPANY
[SSL_CLIENT_S_DN_OU_2] => SOMECOMPANY 
[SSL_CLIENT_S_DN_CN] =>LastName.FirstName.ABCDEFG1234567.ID 
[SSL_CLIENT_I_DN_C] => US
[SSL_CLIENT_I_DN_O] => SOMEOGANIZATION 
[SSL_CLIENT_I_DN_OU] => ECA
[SSL_CLIENT_I_DN_OU_1] => Certification Authorities
[SSL_CLIENT_I_DN_CN] => SOMEOGANIZATION 
[SSL_VERSION_INTERFACE] => mod_ssl/2.4.9 
[SSL_VERSION_LIBRARY] => OpenSSL/1.0.1g 
[SSL_PROTOCOL**]=> TLSv1.2 
[SSL_SECURE_RENEG] => true 
[SSL_COMPRESS_METHOD] => NULL 
[SSL_CIPHER] => ECDHE-RSA-AES128-GCM-SHA256 
[SSL_CIPHER_EXPORT] =>false
[SSL_CIPHER_USEKEYSIZE] => 128 
[SSL_CIPHER_ALGKEYSIZE] => 128
[SSL_CLIENT_VERIFY] => SUCCESS 
[SSL_CLIENT_M_VERSION] => 3
[SSL_CLIENT_M_SERIAL] => 1EDF 
[SSL_CLIENT_V_START] => Aug 18 18:42:46 2015 GMT 
[SSL_CLIENT_V_END] => Aug 17 18:42:46 2016 GMT
[SSL_CLIENT_V_REMAIN] => 272 
[SSL_CLIENT_S_DN] => CN=LastName.FirstName.ABCDEFG1234567.ID,OU=R2AD,OU=ORC,OU=ECA,O=SOMEOGANIZATION,C=US
[SSL_CLIENT_I_DN] => CN=SOMEOGANIZATION,OU=Certification  Authorities,OU=SOMEOGANIZATION,O=SOMEOGANIZATION,C=US
[SSL_CLIENT_A_KEY] => rsaEncryption 
[SSL_CLIENT_A_SIG] => sha1WithRSAEncryption 
[SSL_SERVER_M_VERSION] => 3
[SSL_SERVER_M_SERIAL] => 116DAF 
[SSL_SERVER_V_START] => Nov 19 11:38:28 2015 GMT 
[SSL_SERVER_V_END] => May 17 11:38:28 2016 GMT
[SSL_SERVER_S_DN] => CN=SOMESERVER 
[SSL_SERVER_I_DN] => emailAddress=support@cacert.org,CN=CA Cert Signing Authority,OU=http://www.cacert.org,O=Root CA 
[SSL_SERVER_A_KEY] =>rsaEncryption 
[SSL_SERVER_A_SIG] => sha256WithRSAEncryption
[SSL_SESSION_RESUMED] => Initial

帮助表示赞赏

4

1 回答 1

0

SSL_CLIENT_SAN_* 环境变量存在于 apache 2.4.10 及更高版本中。

于 2015-11-20T09:16:49.773 回答