SSL unter FastCGI?!

[Dexus]

Aktuell lese ich vom Localhost (WinXP Pro) nur die $_SERVER aus:

Code:

Array
(
    [HTTPS] => on
    [SSL_VERSION_INTERFACE] => mod_ssl/2.2.6
    [SSL_VERSION_LIBRARY] => OpenSSL/0.9.8e
    [SSL_PROTOCOL] => TLSv1
    [SSL_COMPRESS_METHOD] => NULL
    [SSL_CIPHER] => DHE-RSA-AES256-SHA
    [SSL_CIPHER_EXPORT] => false
    [SSL_CIPHER_USEKEYSIZE] => 256
    [SSL_CIPHER_ALGKEYSIZE] => 256
    [SSL_CLIENT_VERIFY] => NONE
    [SSL_SERVER_M_VERSION] => 1
    [SSL_SERVER_M_SERIAL] => 8FA98259123A1BE8
    [SSL_SERVER_V_START] => Dec  4 15:11:04 2005 GMT
    [SSL_SERVER_V_END] => Dec  4 15:11:04 2006 GMT
    [SSL_SERVER_S_DN] => /O=Apache Friends/OU=XAMPP for Windows/CN=localhost
    [SSL_SERVER_S_DN_O] => Apache Friends
    [SSL_SERVER_S_DN_OU] => XAMPP for Windows
    [SSL_SERVER_S_DN_CN] => localhost
    [SSL_SERVER_I_DN] => /O=Apache Friends/OU=XAMPP for Windows/CN=localhost
    [SSL_SERVER_I_DN_O] => Apache Friends
    [SSL_SERVER_I_DN_OU] => XAMPP for Windows
    [SSL_SERVER_I_DN_CN] => localhost
    [SSL_SERVER_A_KEY] => rsaEncryption
    [SSL_SERVER_A_SIG] => sha1WithRSAEncryption
    [SSL_SESSION_ID] => 4C452CC8E40B81E2ABB0C47512352149C4692A97193E59C422C67963EA2FBC73
    [HTTP_HOST] => localhost
    [HTTP_USER_AGENT] => Mozilla/5.0 (Windows; U; Windows NT 5.1; de; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9
    [HTTP_ACCEPT] => text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
    [HTTP_ACCEPT_LANGUAGE] => de-de,de;q=0.8,en-us;q=0.5,en;q=0.3
    [HTTP_ACCEPT_ENCODING] => gzip,deflate
    [HTTP_ACCEPT_CHARSET] => ISO-8859-1,utf-8;q=0.7,*;q=0.7
    [HTTP_KEEP_ALIVE] => 300
    [HTTP_CONNECTION] => keep-alive
    [HTTP_COOKIE] => CQ1401session=e66ab5a2b23929b315879fcec977d56a; test=test
    [PATH] => C:\Perl\site\bin;C:\Perl\bin;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\​Wbem
    [SystemRoot] => C:\WINDOWS
    [COMSPEC] => C:\WINDOWS\system32\cmd.exe
    [PATHEXT] => .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
    [WINDIR] => C:\WINDOWS
    [SERVER_SIGNATURE] =>
    [SERVER_SOFTWARE] => Apache
    [SERVER_NAME] => localhost
    [SERVER_ADDR] => 127.0.0.1
    [SERVER_PORT] => 443
    [REMOTE_HOST] => localhost
    [REMOTE_ADDR] => 127.0.0.1
    [DOCUMENT_ROOT] => C:/xampp/htdocs
    [SERVER_ADMIN] => admin@localhost
    [SCRIPT_FILENAME] => D:/localhost/htdocs/index.php
    [REMOTE_PORT] => 2427
    [GATEWAY_INTERFACE] => CGI/1.1
    [SERVER_PROTOCOL] => HTTP/1.1
    [REQUEST_METHOD] => GET
    [QUERY_STRING] =>
    [REQUEST_URI] => /
    [SCRIPT_NAME] => /index.php
    [PHP_SELF] => /index.php
    [REQUEST_TIME] => 1196075186
    [argv] => Array
        (
        )

    [argc] => 0
)

dabei lese ich SSL_SESSION_ID und SSL_PROTOCOL aus, zusätzlich HTTPS (ist ja immer = ON wenn https aufgerufen wird)

je nach dem Welches SSL_PROTOCOL an inhalt hat (TLS, SSL etc. ) wird die SSL_SESSION_ID vom$_SERVER ausgelesen und Codiert und als Cookie abgelegt sowie in der $_SESSION gespeichert.

ACHTUNG session_id() != SSL_SESSION_ID
das eine Ist das Session system vom PHP und das andere von SSL ...


habe nun aber etwas gefunden und aktiviert und siehe da ich habe auf meinen Server jetzt:

Code:

[REDIRECT_HTTPS] => on
    [REDIRECT_SSL_VERSION_INTERFACE] => mod_ssl/2.2.3
    [REDIRECT_SSL_VERSION_LIBRARY] => OpenSSL/0.9.8c
    [REDIRECT_SSL_PROTOCOL] => SSLv3
    [REDIRECT_SSL_COMPRESS_METHOD] => NULL
    [REDIRECT_SSL_CIPHER] => DHE-RSA-AES256-SHA
    [REDIRECT_SSL_CIPHER_EXPORT] => false
    [REDIRECT_SSL_CIPHER_USEKEYSIZE] => 256
    [REDIRECT_SSL_CIPHER_ALGKEYSIZE] => 256
    [REDIRECT_SSL_CLIENT_VERIFY] => NONE
    [REDIRECT_SSL_SERVER_M_VERSION] => 3
    [REDIRECT_SSL_SERVER_M_SERIAL] => 04554A
    [REDIRECT_SSL_SERVER_V_START] => Nov 26 10:03:40 2007 GMT
    [REDIRECT_SSL_SERVER_V_END] => May 24 10:03:40 2008 GMT
    [REDIRECT_SSL_SERVER_S_DN] => /CN=www.conquest1401.net
    [REDIRECT_SSL_SERVER_S_DN_CN] => www.conquest1401.net
    [REDIRECT_SSL_SERVER_I_DN] => /O=Root CA/OU=http://www.cacert.org/CN=CA Cert Signing Authority/emailAddress=support@cacert.org
    [REDIRECT_SSL_SERVER_I_DN_O] => Root CA
    [REDIRECT_SSL_SERVER_I_DN_OU] => http://www.cacert.org
    [REDIRECT_SSL_SERVER_I_DN_CN] => CA Cert Signing Authority
    [REDIRECT_SSL_SERVER_I_DN_Email] => support@cacert.org
    [REDIRECT_SSL_SERVER_A_KEY] => rsaEncryption
    [REDIRECT_SSL_SERVER_A_SIG] => sha1WithRSAEncryption
    [REDIRECT_SSL_SESSION_ID] => 740DDE5CBA83930688AB51862E7930E1BB85DA9F4F9E4E50D9206A53322EBB05
    [REDIRECT_HANDLER] => php-fastcgi
    [REDIRECT_STATUS] => 200
    [HTTPS] => on

naja muss ich halt mein Script anpassen -.-