iTP Secure WebServer System Administrators Guide (Version 7.5+)

Table 16 Environment Variables (continued)
DescriptionEnvironment Variable
If TLS or SSL client authentication is used, this variable
contains the certificate that is presented by the Web client.
HTTPS_CLIENT_CERT
It is encoded in ASCII using radix-64. If SSL 3.0 was used,
the value stored in this variable is the Web client's
certificate, extracted from the certificate chain that was
received from the Web client.
If TLS or SSL client authentication is used, this variable
contains the type of certificate used. Possible values are
X509 and X509V3.
Example:
HTTPS_CLIENT_CERTTYPE
X509V3
If TLS or SSL client authentication is used with the
-requestauth option, and the iTP Secure WebServer
HTTPS_CLIENT_ERROR_DN
discovers an error while verifying the client certificate, this
variable contains the DN of the certificate in error.
If TLS or SSL client authentication is used, this variable
contains the DN of the direct issuer of the client certificate.
HTTPS_CLIENT_ISSUER
The DN is taken from the issuer field within the client
certificate.
Example:
OU=PersonalCertificate,0="RSA Data
Security,Inc.",C=US
If TLS or SSL client authentication is used, this variable
contains the verification status of the client certificate. For
HTTPS_CLIENT_STATUS
descriptions of possible status values, see “Using the
-requestauth Option” (page 73).
Example:
VALID
If TLS or SSL client authentication is used, this variable
contains the DN of the Web client.
Example:
HTTPS_CLIENT_SUBJECT
CN=Juliet,O=Capulet's House of Keys
Indicates the port number used for the TLS or SSL request.
Example:
HTTPS_PORT
443
Indicates the protocol used. Possible values are TLS and
SSL.
Example:
HTTPS_PROTOCOL
SSL
Indicates the version of the security protocol used. Possible
values are: 3 - (SSL 3.0) 1.0 - (TLS 1.0) 1.1 - (TLS 1.1) 1.2
- (TLS 1.2)
Example:
HTTPS_PROTOCOL_VERSION
3.0
These environment variables pertain to session identifiers.
The department ID, in ASCII.SI_DEPARTMENT
The group number embedded in the ticket. The group ID
is taken from a user database. You can use this variable
SI_GROUP
to present customized Web pages to particular groups of
users.
Example:
45
The SI_GROUP variable is present only if a valid ticket is
presented.
Passing CGI Environment Variables 149