catfood has asked for the wisdom of the Perl Monks concerning the following question:

I currently athenticate that an SSL cert is signed by the CA (me) with the following apache config. 
SSLVerifyClient require
SSLVerifyDepth 2
SSLCACertificateFile conf/ssl.crt/ca.crt

[download]
I also use basic athentication. But I want to write a Perl handler (mod_perl PerlAuthenHandler ) to look up in a database and confirm the basic athentication matches the certificate. I was going to use the Email address from the SSL environment variable DN_Email to check against the data heald in DB but is there a better way of doing this ?

Back to Seekers of Perl Wisdom