Exit routine processing for the PKI Services CGIs

For the end-user functions except VERIFY, the PKI Services Web application CGIs support calling an installation-provided exit routine. The exit routine can perform tasks such as:

Provide additional authorization checking
Validate and change parameters
Capture certificates for further processing
Recover a passphrase used in a certificate request

If the exit routine exists, it must be a UNIX executable program residing in the file system, and it must have appropriate permission assigned. To specify the exit routine, the UNIX programmer sets the _PKISERV_EXIT environment variable in the Web server's environment variables file. On input it receives standard UNIX parameters (that is, argc and argv[]). It communicates back to PKISERV through the return code and by writing to STDOUT.