Hi,

Is there an easy way to see what is being put into the environment by mod_ssl 
before mod_wsgi runs and sets up the script context to run?

I can’t tell if it’s not being seeded into request.environ[] properly, or if 
it’s never in the process to begin with because of a failure happening before 
mod_wsgi even comes into the picture.

Is there an easy way to figure out which one it is?

Thanks,

-Philip


> On Jul 27, 2021, at 12:01 AM, Graham Dumpleton <[email protected]> 
> wrote:
> 
> They are not passed as environment variables to the process. They are passed 
> in the WSGI environ dictionary.
> 
> So don't use os.environ if that is what you are doing, you need to access 
> them from the Flask request environ.
> 
> https://flask.palletsprojects.com/en/2.0.x/api/?highlight=environ#flask.Request.environ
> 
> Graham
> 
>> On 27 Jul 2021, at 3:19 pm, 'Philip Prindeville' via modwsgi 
>> <[email protected]> wrote:
>> 
>> Hi,
>> 
>> I’m using mod_wsgi 3.4, Python 3.7, Apache 2.4.48, and Flask 2.0.1 in my 
>> production environment.
>> 
>> This is on Amazon Linux 2.
>> 
>> I’m trying to figure out why the various SSL_* environment variables aren’t 
>> present when my script runs, even though I have:
>> 
>> SSLOptions +StdEnvVars -FakeBasicAuth +ExportCertData +StrictRequire
>> …
>> SSLVerifyClient require
>> SSLVerifyDepth 5
>> …
>> 
>> Looking at the sources, the configure.ac file looks pretty trivial, so I 
>> don’t think it was built by Amazon with anything disabled.
>> 
>> I’m trying to do authentication based on both Apache’s built-in certificate 
>> verification but also on the subject DN as an identity and attribute/value 
>> pairs.
>> 
>> I couldn’t find any documentation on mod_ssl integration or debugging 
>> issues, other than mod_ssl needed to be loaded by mod_wsgi, which is the 
>> case in Amazon Linux 2.
>> 
>> Can you please point me to any documentation about using SSL with mod_wsgi?
>> 
>> Thanks,
>> 
>> -Philip
>> 
>> 
>> 
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "modwsgi" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to [email protected].
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/modwsgi/90FF96C3-B45F-4F61-9901-A5B97B1B35AF%40truepic.com.
> 
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "modwsgi" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to [email protected].
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/modwsgi/0443D3CE-F9D3-4776-BFC3-6D29615EE850%40gmail.com.

-- 
You received this message because you are subscribed to the Google Groups 
"modwsgi" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/modwsgi/52935489-4177-4830-A091-179CB6BF33D1%40truepic.com.

Reply via email to