Corporation Server User Manual

mod_certheaders

Oracle HTTP Server Modules 7-7

mod_certheaders can be used to instruct Oracle HTTP Server to treat certain

requests as if they were received through HTTPS even though they were

received through HTTP. This is useful when Oracle HTTP Server is front-ended

by a reverse proxy or load balancer, which acts as a termination point for SSL

requests, and forwards the requests to Oracle HTTP Server through HTTPS.

For load balancers, mod_certheaders must be explicitly conﬁgured to

determine which requests should be treated as HTTPS requests. To do this, use

the following directive:

SimulateHttps on

SimulateHttps can be embedded within a virtual host, such as:

SimulateHttps on

</VirtualHost>

SSL_CLIENT_I_DN_O SSL-Client-I-DN-O SSL_SERVER_I_DN_O SSL-Server-I-DN-O

SSL_CLIENT_I_DN_OU SSL-Client-I-DN-OU SSL_SERVER_I_DN_OU SSL-Server-I-DN-OU

SSL_CLIENT_I_DN_CN SSL-Client-I-DN-CN SSL_SERVER_I_DN_CN SSL-Server-I-DN-CN

SSL_CLIENT_I_DN_T SSL-Client-I-DN-T SSL_SERVER_I_DN_T SSL-Server-I-DN-T

SSL_CLIENT_I_DN_I SSL-Client-I-DN-I SSL_SERVER_I_DN_I SSL-Server-I-DN-I

SSL_CLIENT_I_DN_G SSL-Client-I-DN-G SSL_SERVER_I_DN_G SSL-Server-I-DN-G

SSL_CLIENT_I_DN_S SSL-Client-I-DN-S SSL_SERVER_I_DN_S SSL-Server-I-DN-S

SSL_CLIENT_I_DN_D SSL-Client-I-DN-D SSL_SERVER_I_DN_D SSL-Server-I-DN-D

SSL_CLIENT_I_DN_UID SSL-Client-I-DN-Uid SSL_SERVER_I_DN_UID SSL-Server-I-DN-Uid

SSL_CLIENT_I_DN_Email SSL-Client-I-DN-Email SSL_SERVER_I_DN_Email SSL-Server-I-DN-Email

SSL_CLIENT_A_SIG SSL-Client-A-Sig SSL_SERVER_A_SIG SSL-Server-A-Sig

SSL_CLIENT_A_KEY SSL-Client-A-Key SSL_SERVER_A_KEY SSL-Server-A-Key

Table 7–2 CGI Environment Variables with Corresponding Header Names

CGI Variable Header Name CGI Variable Header Name