How to check if request came with the right ssl certificate

Question

I have a php file on a server. Some service will send requests to this file and i want to check if the variables: SSL_CLIENT_VERIFY, SSL_CLIENT_S_DN_O, SSL_CLIENT_S_DN_L, SSL_CLIENT_S_DN_CN, SSL_CLIENT_S_DN_C, SSL_CLIENT_I_DN_O, SSL_CLIENT_I_DN_CN, SSL_CLIENT_I_DN_C has the right values.

How to check them in PHP?

How is your PHP connected with the SSL layer? I assume via your webserver, so please list how you would obtain these values within / from your webserver first. — hakre
– hakre, Commented Jan 9, 2013 at 11:06

Bruno · Accepted Answer · 2013-01-09 16:49:41Z

2

Assuming you're using Apache Httpd, you should be able to get access to the SSL environment variables using $_SERVER (for example $_SERVER['SSL_CLIENT_S_DN_CN']).

You'll also need to make sure your SSLOptions directive is configured accordingly for these variables to be used.

answered Jan 9, 2013 at 16:49

Bruno

123k33 gold badges278 silver badges389 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

gniewleone Over a year ago

Could You tell me how to configure SSLOptions ? Now when I display $_SERVER it doesn't contains any of the SSL variables

Bruno Over a year ago

Just like it says in the first paragraph of the documentation I've linked to: SSLOptions StdEnvVars.

Collectives™ on Stack Overflow

How to check if request came with the right ssl certificate

1 Answer 1

2 Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Related