MAN page from OpenSuSE perl-OpenXPKI-Core-0.9.1389-6.362.CS.i586.rpm
OpenXPKI::Server::Authentication::ClientX509
Section: User Contributed Perl Documentation (3)
Updated: 2008-09-30
Index Name
OpenXPKI::Server::Authentication::ClientX509 - support for client based X509 authentication.
Description
Functions
new
the constructor reads the acceptable roles from the configuration
login_step
returns (user, role, service ready message) triple if login wassuccessful, (undef, undef, {}) otherwise. The message whichis supplied as a parameter to the function should contain both a
LOGIN and a
CERTIFICATE parameter.The certificate should be the PEM-encoded client certificate.In a typical Apache setting, this is
$ENV{'
SSL_CLIENT_CERT'} ifthe +ExportCertData SSLOption is set.The certificate is checked for validity at login, the certificaterole is read from the database and compared to the list of acceptableroles from the configuration.
Index
- Name
- Description
- Functions
- new
- login_step
This document was created byman2html,using the manual pages.
