Netscape NETSCAPE MANAGEMENT SYSTEM 6.0 -... User manual

Customization Guide
Netscape Certificate Management System
Version6.0
March 2002

Netscape Communications Corporation ("Netscape") and its licensors retain all ownership rights to the software programs offered by
Netscape (referred to herein as "Software") and related documentation. Use of the Software and related documentation is governed by the
license agreement for the Software and applicable copyright law.
Your right to copy this documentation is limited by copyright law. Making unauthorized copies, adaptations or compilation works is
prohibited and constitutes a punishable violation of the law. Netscape may revise this documentation from time to time without notice.
THIS DOCUMENTATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. IN NO EVENT SHALL NETSCAPE BE LIABLE
FOR INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY KIND ARISING FROM ANY ERROR IN THIS
DOCUMENTATION, INCLUDING WITHOUT LIMITATION ANY LOSS OR INTERRUPTION OF BUSINESS, PROFITS, USE, OR DATA.
The Software and documentation are copyright © 2001 Sun Microsystems, Inc. Portions copyright 1999, 2002 Netscape Communications
Corporation. All rights reserved.
Netscape and the Netscape N logo are registered trademarks of Netscape Communications Corporation in the United States and other
countries. Other Netscape logos, product names, and service names are also trademarks of Netscape Communications Corporation, which
may be registered in some countries. Other product and brand names are the exclusive property of their respective owners.
The downloading, exporting, or reexporting of Netscape software or any underlying information or technology must be in full compliance
with all United States and other applicable laws and regulations. Any provision of Netscape software or documentation to the U.S.
government is with restricted rights as described in the license agreement for that Software.

3
Contents
AboutThisGuide............................................................... 9
What’sinThisGuide.....................................................................9
WhatYouShouldAlreadyKnow ..........................................................9
ConventionsUsedinThisGuide .........................................................10
WheretoGoforRelatedInformation......................................................12
Chapter 1 BeforeYouBegin ................................................... 15
WhatYouNeedtoKnowtoChangeForms ................................................15
HTTP,QueryURLs,andHTMLForms .................................................16
JavaScript...........................................................................16
HowtheFormsWork ...................................................................16
RequestsSenttotheCMSserver .......................................................17
ResponsesandOutputTemplates ......................................................17
ErrorsandtheErrorTemplate .........................................................19
JavaScriptUsedByAllInterfaces .........................................................20
Chapter 2 IntroductiontoEnd-EntityServicesInterface ............................ 27
End-EntityServicesInterface.............................................................27
HowClientTypeDeterminestheEnd-EntityInterface ....................................29
CertificateRequestFormatsSpecifictoEndEntities ......................................29
AccessingtheEnd-EntityServicesInterface ................................................31
End-EntityFormsandTemplates .........................................................31
LocatingEnd-EntityFormsandTemplates ..............................................31
FormsforCertificateEnrollment .......................................................32
FormsforCertificateRenewal .........................................................33
FormsforCertificateRevocation .......................................................33
FormsforCertificateRetrieval .........................................................34
FormsforKeyRecovery ..............................................................35
OtherForms ........................................................................35
OutputTemplatesforEnd-EntityInterfaces .............................................36

4 Netscape Certificate Management System Customization Guide • March 2002
Chapter 3 End-EntityInterfaceReference........................................ 39
OverviewofEnd-EntityInterfaces........................................................ 40
CertificateEnrollmentProtocolInterface .................................................. 41
Description ......................................................................... 41
DefaultForms....................................................................... 41
RequestParameters.................................................................. 41
ChallengeRevocationInterface .......................................................... 42
Description ......................................................................... 42
DefaultForms....................................................................... 42
RequestParameters.................................................................. 42
Response ........................................................................... 44
DisplayCertificateBySerialNumberInterface ............................................. 44
Description ......................................................................... 44
DefaultForms....................................................................... 44
RequestParameters.................................................................. 44
Response ........................................................................... 45
DisplayCertificateFromRequestInterface ................................................ 46
Description ......................................................................... 46
DefaultForms....................................................................... 46
RequestParameters.................................................................. 47
Response ........................................................................... 47
EnrollmentInterface.................................................................... 49
Description ......................................................................... 49
DefaultForms....................................................................... 50
RequestParameters.................................................................. 51
Response ........................................................................... 55
GetCAChainInterface ................................................................. 59
Description ......................................................................... 59
DefaultForms....................................................................... 60
RequestParameters.................................................................. 60
Response ........................................................................... 61
GetCertificateBySerialNumberInterface................................................. 61
Description ......................................................................... 61
DefaultForms....................................................................... 62
RequestParameters.................................................................. 62
Response ........................................................................... 63
GetCertificateFromRequestInterface .................................................... 65
Description ......................................................................... 65
DefaultForms....................................................................... 66
RequestParameters.................................................................. 66
Response ........................................................................... 67
GetCRLInterface ...................................................................... 69
Description ......................................................................... 69

5
DefaultForms .......................................................................70
RequestParameters ..................................................................70
Response ...........................................................................71
ListCertificatesInterface ................................................................72
Description .........................................................................72
DefaultForms .......................................................................73
RequestParameters ..................................................................73
Response ...........................................................................78
RenewalInterface ......................................................................80
Description .........................................................................80
DefaultForms .......................................................................81
RequestParameters ..................................................................81
Response ...........................................................................81
RevocationInterface ....................................................................82
Description .........................................................................82
DefaultForms .......................................................................82
RequestParameters ..................................................................82
Response ...........................................................................85
Chapter 4 InternationalizationofEnd-EntityInterface.............................. 87
DisplayingFormsinNon-EnglishLanguages ..............................................87
Chapter 5 IntroductiontoAgentServicesInterface................................ 93
AgentServicesInterface .................................................................93
CertificateManagerAgentServices ....................................................94
RegistrationManagerAgentServices...................................................95
DataRecoveryManagerAgentServices.................................................96
AccessingtheAgentServicesInterface ....................................................96
AgentFormsandTemplates .............................................................97
StructureoftheAgentServicesInterface ................................................97
LocatingAgentFormsandTemplates ..................................................98
Chapter 6 AgentInterfaceReference............................................ 99
OverviewofAgentInterfaces ...........................................................100
ApproveRevocationInterface...........................................................101
Description ........................................................................101
DefaultForms ......................................................................102
RequestParameters .................................................................102
Response ..........................................................................104
BulkEnrollmentInterface ..............................................................105
Description ........................................................................105
ConfigurationParameters............................................................106

6 Netscape Certificate Management System Customization Guide • March 2002
DefaultForms...................................................................... 107
RequestParameters................................................................. 107
Response .......................................................................... 112
DisplayKeyBySerialNumberInterface.................................................. 115
Description ........................................................................ 115
DefaultForms...................................................................... 116
RequestParameters................................................................. 116
Response .......................................................................... 116
DisplayKeyForRecoveryInterface...................................................... 118
Description ........................................................................ 118
DefaultForms...................................................................... 118
RequestParameters................................................................. 118
Response .......................................................................... 119
ExamineRecoveryInterface ............................................................ 120
Description ........................................................................ 120
DefaultForms...................................................................... 121
RequestParameters................................................................. 121
Response .......................................................................... 122
GetApprovalStatusInterface........................................................... 122
Description ........................................................................ 122
DefaultForms...................................................................... 123
RequestParameters................................................................. 123
Response .......................................................................... 124
GetPKCS#12DataInterface............................................................ 125
Description ........................................................................ 125
DefaultForms...................................................................... 125
RequestParameters................................................................. 125
Response .......................................................................... 126
GrantRecoveryInterface............................................................... 126
Description ........................................................................ 126
DefaultForms...................................................................... 126
RequestParameters................................................................. 126
Response .......................................................................... 127
KeyQueryInterface ................................................................... 128
Description ........................................................................ 128
DefaultForms...................................................................... 128
RequestParameters................................................................. 129
Response .......................................................................... 131
KeyRecoveryQueryInterface .......................................................... 133
Description ........................................................................ 133
DefaultForms...................................................................... 134
RequestParameters................................................................. 134
Response .......................................................................... 136

7
ProcessCertificateRequestInterface .....................................................138
Description ........................................................................138
DefaultForms ......................................................................139
RequestParameters .................................................................139
Response ..........................................................................142
ProcessDRMRequestInterface..........................................................147
Description ........................................................................147
DefaultForms ......................................................................147
RequestParameters .................................................................147
Response ..........................................................................148
ProcessRequestInterface ...............................................................150
Description ........................................................................150
DefaultForms ......................................................................151
RequestParameters .................................................................151
Response ..........................................................................152
RecoverKeyBySerialNumberInterface..................................................152
Description ........................................................................152
DefaultForms ......................................................................153
RequestParameters .................................................................153
Response ..........................................................................155
RemoveCertificateHoldInterface .......................................................156
Description ........................................................................156
DefaultForms ......................................................................156
RequestParameters .................................................................156
Response ..........................................................................157
RequestsQueryInterface ...............................................................158
Description ........................................................................158
DefaultForms ......................................................................159
RequestParameters .................................................................159
Response ..........................................................................160
SelectforRevocationInterface...........................................................163
Description ........................................................................163
DefaultForms ......................................................................164
RequestParameters .................................................................164
Response ..........................................................................165
UpdateCRLInterface ..................................................................166
Description ........................................................................166
DefaultForms ......................................................................166
RequestParameters .................................................................166
Response ..........................................................................167
UpdateDirectoryInterface..............................................................168
Description ........................................................................168
DefaultForms ......................................................................168

8 Netscape Certificate Management System Customization Guide • March 2002
RequestParameters................................................................. 168
Response .......................................................................... 170
Index ....................................................................... 173

9
About This Guide
The Customization Guide provides reference information about the HTTP interface
of Netscape Certificate Management System (CMS). The information helps you
customize Certificate Management System, and use it for issuing and managing
certificates to various end entities, such as web browsers (users), servers, Virtual
Private Network (VPN) clients, and Cisco™ routers.
This chapter has the following sections:
• What’s in This Guide (page 9)
• What You Should Already Know (page 9)
• Conventions Used in This Guide (page 10)
• Where to Go for Related Information (page 12)
What’s in This Guide
This guide covers topics that help you customize CMS agent and end-entity
interfaces. You should use this guide in conjunction with the other CMS
documentation, such as the one that explains how to install and configure
Certificate Management System. Complete list of CMS documentation is provided
later in this preface.
What You Should Already Know
This guide is intended for experienced system administrators who are planning to
deploy Certificate Management System. CMS agents should refer to CMS Agent’s
Guide for information on how to perform agent tasks, such as handling certificate
requests and revoking certificates.

Conventions Used in This Guide
10 Netscape Certificate Management System Customization Guide • March 2002
This guide assumes that you
• Are familiar with the basic concepts of public-key cryptography and the Secure
Sockets Layer (SSL) protocol.
❍SSL cipher suites
❍The purpose of and major steps in the SSL handshake
• Understand the concepts of intranet, extranet, and the Internet security and the
role of digital certificates in a secure enterprise. These include the following
topics:
❍Encryption and decryption
❍Public keys, private keys, and symmetric keys
❍Significance of key lengths
❍Digital signatures
❍Digital certificates, including various types of digital certificates
❍The role of digital certificates in a public-key infrastructure (PKI)
❍Certificate hierarchies
If you are new to these concepts, we recommend that you read the
security-related appendixes of the accompanying manual, Managing Servers
with Netscape Console.
• Are familiar with the role of Netscape Console in managing Netscape servers.
Otherwise, see the accompanying manual, Managing Servers with Netscape
Console.
• Are reading this guide in conjunction with the documentation listed in “Where
to Go for Related Information” on page 12.
Conventions Used in This Guide
The following conventions are used in this guide:
•Monospaced font—Thistypefaceisusedforanytextthatappearsonthe
computer screen or text that you should type. It’s also used for filenames,
functions, and examples.
Example: Server Root is the directory where the CMS binaries are kept.

Conventions Used in This Guide
About This Guide 11
•Italic—Italic type is used for emphasis, book titles, and glossary terms.
Example: This control depends on the access permissions the superadministrator
has set up for you.
• Text within “quotation marks”—Cross-references to other topics within this
guide.
Example: For more information, see “Issuing a Certificate to a New User” on
page 154.
•Boldface—Boldface type is used for various UI components such as captions
and field names, and the terminology explained in the glossary, which can be
found in CMS Installation and Setup Guide.
Example:
Rotation frequency. From the drop-down list, select the interval at which the
server should rotate the active error log file. The available choices are Hourly,
Daily, Weekly, Monthly, and Yearly. The default selection is Monthly.
•Monospaced [ ]—Square brackets enclose commands that are optional.
Example:
PrettyPrintCert <input_file> [<output_file>]
<input_file> specifies the path to the file that contains the base-64
encoded certificate.
<output_file> specifies the path to the file to write the certificate. This
argument is optional; if you don’t specify an output file, the certificate
information is written to the standard output.
•<>—Angle brackets enclose variables or placeholders. When following
examples, replace the angle brackets and their text with text that applies to
your situation. For example, when path names appear in angle brackets,
substitute the path names used on your computer.
Example: Using Netscape Communicator 4.7x or later, enter the URL for the
administration server: http://<hostname>:<port_number>
• /—A slash is used to separate directories in a path. If you use the Windows NT
operating system, you should replace / with \ in paths.
Example: Except for the Security Module Database Tool, you can find all the
other command-line utilities at this location: <server_root>/bin/cert/tools
• Sidebar text—Sidebar text marks important information. Make sure you read
the information before continuing with a task.

WheretoGoforRelatedInformation
12 Netscape Certificate Management System Customization Guide • March 2002
Examples:
Where to Go for Related Information
This section summarizes the documentation that ships with Certificate
Management System, using these conventions:
•<server_root> is the directory where the CMS binaries are kept (which you
specify during installation).
•<instance_id> is the ID for this instance of Netscape Certificate Management
System (specified during installation).
The documentation set for Certificate Management System includes the following:
•Managing Servers with Netscape Console
Provides background information on basic cryptography concepts and the role
of Netscape Console. To view the HTML version of this guide, open this file:
<server_root>/manual/en/admin/ag/contents.htm
•CMS Installation and Setup Guide
Describes how to plan for, install, and administer Certificate Management
System. To access the installation and configuration information from within
the CMS Installation Wizard or from the CMS window (within Netscape
Console), click any help button. To view the HTML version of this guide, open
this file: <server_root>/manual/en/cert/setup_guide/contents.htm
•CMS Plug-Ins Guide
Provides detailed reference information on CMS plug-in modules. To access
this information from the CMS window within Netscape Console, click any
help button. To view the HTML version of this guide, open this file:
<server_root>/manual/en/cert/plugin_guide/contents.htm
NOTE You can use Netscape Console only when Netscape Administration
Server is up and running.
CAUTION A caution note documents a potential risk of losing data, damaging
software or hardware, or otherwise disrupting system performance.

Where to Go for Related Information
About This Guide 13
•CMS Command-Line Tools Guide
Provides detailed reference information on CMS tools. To view the HTML
version of this guide, open this file:
<server_root>/manual/en/cert/tools_guide/contents.htm
•CMS Customization Guide (this guide)
Provides detailed reference information on customizing the end-entity and
agent interfaces. To view the HTML version of this guide, open this file:
<server_root>/manual/en/cert/custom_guide/contents.htm
•CMSAgent’sGuide
Provides detailed reference information on CMS agent interfaces. To access
this information from the Agent Services pages, click any help button. To view
the HTML version of this guide, open this file:
<server_root>/cert-<instance_id>/web-apps/agent/manual/agent_gui
de/contents.htm
•End-EntityHelp
Provides detailed reference information on CMS end-entity interfaces. To
access this information from the end-entity pages, click any help button. To
view the HTML version of this guide, open this file:
<server_root>/cert-<instance_id>/web-apps/ee/manual/ee_guide/con
tents.htm
For a complete list of CMS documentation, open the
<server_root>/manual/index.html file. For the latest information about
Certificate Management System, check the CMS Release Notes and other
documents available at this site:
http://enterprise.netscape.com/docs/cms/index.html

WheretoGoforRelatedInformation
14 Netscape Certificate Management System Customization Guide • March 2002

15
Chapter 1
Before You Begin
The services interfaces that come with Netscape Certificate Management System
(CMS) make it possible for end-entities and agents to interact with the server. Your
end-entities and agents can use the interface’s HTML-based forms to carry out
various certificate and key-related operations, such as enrolling for, renewing, and
revoking certificates.
You can use the default forms as they are, customize them, or develop your own
forms to suit your organization’s policies or terminology. This chapter explains
how to customize the forms and templates used by the interfaces.
The chapter has the following sections:
• What You Need to Know to Change Forms (page 15)
• HowtheFormsWork(page16)
• JavaScript Used By All Interfaces (page 20)
What You Need to Know to Change Forms
Changing the default forms’ appearance requires only a basic knowledge of HTML
and a text editor. However, more significant customizing efforts require a good
understanding of the following:
• HTTP, Query URLs, and HTML Forms
•JavaScript
• The way the End-Entity Services Interface works

How the Forms Work
16 Netscape Certificate Management System Customization Guide • March 2002
HTTP, Query URLs, and HTML Forms
Requests from the end-entity services interface to Certificate Management System
are submitted using the HTTP GET and POST methods. Requests take the form of
query URLs (in the case of the GET method) or data sent through standard output
(in the case of the POST method).
For background on these topics, consult books on authoring for the World Wide
Web, on HTML, and on the HTML specification. Another good source is
Netscape’s documentation on creating Internet sites; that documentation is
available at this URL:
http://home.netscape.com/assist/net_sites/index.html
JavaScript
JavaScript is a scripting language that most browser software, including Netscape
Navigator and Communicator, used for dynamic forms. (JavaScript is not the same
as the more sophisticated and powerful Java language that is also supported by
Netscape clients.)
In the agent and end-entity services forms, JavaScript is used to check input values
and to formulate requests to the CMS server. JavaScript is also used in the output
templates to present and format responses from the CMS server.
To customize the forms and templates, you need to be familiar with JavaScript. For
more information on JavaScript and its use in Netscape browsers, see the Netscape
JavaScript Authoring Guide available at this URL:
http://home.netscape.com/eng/mozilla/3.0/handbook/javascript/
index.html
There are also several books on this topic.
How the Forms Work
Administrators, end-entities, and agents request service operations using the HTTP
or HTTPS (HTTP over SSL) protocol using either the GET method (by submitting
query URLs) or the POST method (by submitting a URL-encoded form with the
content-type application/x-www-form-urlencoded). The GET method and the
POST method result in a set of name-value pairs; this set constitutes the request.
For certificate service operations, the URI portion should indicate
/<operation>

How the Forms Work
Chapter 1 Before You Begin 17
where operation designates the certificate (management) service portion, such as
enrollment, retrieval, renewal, or revocation of the CMS server. Any HTTP
operationswithURIsthatdonotbeginwiththe/<operation> prefix are treated as
requests for other kinds of web service by the CMS server. See chapters Chapter 3,
“End-Entity Interface Reference” and Chapter 6, “Agent Interface Reference” for
details on all the available operations.
Requests Sent to the CMS server
The services interface handles a set of operations. Each operation has a name and
expects a specific set of parameters.
(The examples in this chapter are what you would see if Certificate Management
System were running on the host certs.example.com and listening on the
standard HTTPS port.)
Forexample,thedisplayBySerial interface displays the certificate with the serial
number matching the serialNumber parameter. To use the displayBySerial
interface to retrieve the certificate with serial number 58 (0x3a) using HTTP GET,
you would use the following URL:
https://certs.example.com/displayBySerial?serialNumber=58
You could embed this URL in a link on an HTML page to allow users to view this
certificate.
If you used an HTML form (rather than a query URL) to invoke this operation, the
HTML for the form might look like this:
<FORM ACTION="https://certs.example.com/displayBySerial"
METHOD="POST">
Serial Number: <INPUT TYPE="TEXT" NAME="serialNumber">
<INPUT TYPE="SUBMIT" VALUE="Display This Certificate">
</FORM>
In the resulting form, the user enters the serial number of the certificate to be
displayed.
Responses and Output Templates
Certificate Management System responds to service requests by sending back an
HTML page built from two parts: a fragment of JavaScript code containing the data
resulting from the operation and a template defining how the data is processed and
displayed.

How the Forms Work
18 Netscape Certificate Management System Customization Guide • March 2002
The fragment of JavaScript code consists of a result object that contains data
properties only (no methods). The properties of the object correspond to parts of
the response.
The template generally contains a combination of HTML and JavaScript code that
processes and displays data. The template is set up to make use of the data in the
result object.
In responding to a request, Certificate Management System determines the data
that needs to be returned, embeds the data in the definition of the result object,
and inserts the result object in the template. When the browser receives the
constructed HTML page from the CMS server, the JavaScript code in the template
file looks at the values in the result object and uses the data to display the HTML
page to the user.
Because the functions that manipulate and display the data are accessible to you in
the plain-text template files (as opposed to being hardcoded in the CMS server’s
libraries), you can customize the way data is used and presented to the user by
editing the JavaScript and HTML in the template files.
Forexample,thedisplayBySerial operation generates the following JavaScript
code fragment:
<SCRIPT LANGUAGE="JavaScript">
var header = new Object();
var fixed = new Object();
var recordSet = new Array;
var result = new Object();
var httpParamsCount = 0;
var httpHeadersCount = 0;
var authTokenCount = 0;
var serverAttrsCount = 0;
header.HTTP_PARAMS = new Array;
header.HTTP_HEADERS = new Array;
header.AUTH_TOKEN = new Array;
header.SERVER_ATTRS = new Array;
header.certPrettyPrint = [long string containing pretty-printed
certificate]
header.noCertImport = false;
header.certFingerprint = [string containing certificate
fingerprints]
header.authorityid = "ca";
header.serialNumber = 5;
header.emailCert = true;
header.certChainBase64 = [string containing base-64 encoded
certificate]

How the Forms Work
Chapter 1 Before You Begin 19
result.header = header;
result.fixed = fixed;
result.recordSet = recordSet;
</SCRIPT>
Notice how this code fragment defines an object named result and puts the
resulting data from the operation in the properties of that object. Each certificate
service operation returns an object named result. The contents of the result
object are specific to the operation.
When it responds to the request, the displayBySerial interface running on
Certificate Management System inserts this JavaScript fragment into the template
file it uses to return results to the requestor. the CMS server inserts the fragment in
the template file where it finds the tag <CMS_TEMPLATE>. It then returns the
template with the inserted fragment to the client. The client then processes the
completed template and displays the resulting page. In the case of the
displayBySerial operation, the template file uses JavaScript and HTML to
display the contents of the result object to the user.
Because the data from the operation is available in the result object, you can
customize the JavaScript in the template or write your own functions to use this
data. For example, to access the certificate’s serial number, you can write a
JavaScript function that uses result.header.serialNumber.
Templates for each operation are stored in the web-apps subdirectory of the CMS
server instance. The web-apps subdirectory contains the following subdirectories
where forms and templates are located:
•ee/ca for Certificate Manager end-entity interfaces
•ee/ra for Registration Manager end-entity interfaces
•agent/ca for Certificate Manager agent interfaces
•agent/kra for Data Recovery Manager agent interfaces
•agent/ra for Registration Manager agent interfaces
The CMS server reads the templates dynamically; you do not have to restart the
CMS server for it to read changes to the template files.
Errors and the Error Template
All certificate service errors in the end-entity interface are returned through a
single template called GenError.template.Theerror result object contains the
following data properties:

JavaScript Used By All Interfaces
20 Netscape Certificate Management System Customization Guide • March 2002
<SCRIPT LANGUAGE="JavaScript">
var header = new Object();
var result = new Object();
header.errorDetails = [a string describing the context of the
error]
header.errorDescription = [a string describing the error]
result.header = header;
</SCRIPT>
The default CMS error template prints the information in the error result object
along with some explanatory text.
JavaScript Used By All Interfaces
This section describes the JavaScript variables that are common to all responses
from end-entity and agent interfaces. The interface definitions in subsequent
sections give details about additional JavaScript that may be added by specific
interfaces.
The CMS server handling the interface request replaces the <CMS_TEMPLATE> tag in
a template with the JavaScript variables described in this section. When you
modify or create templates, make sure the <CMS_TEMPLATE> tagappearsinthefile
if your response needs to use any of the variables returned by an interface.
The JavaScript included in a response allows you to customize how the response is
displayed or processed. For example, the queryCert.template file is used to list
certificates returned by the List Certificates interface. The template makes extensive
use of the JavaScript in the response to display a summary of each certificate and
also to create new HTTP forms that can show details about a certificate.
All responses will include the following JavaScript:
<SCRIPT LANGUAGE="JavaScript">
var header = new Object();
var fixed = new Object();
var recordSet = new Array;
var result = new Object();
var httpParamsCount = 0;
var httpHeadersCount = 0;
var authTokenCount = 0;
var serverAttrsCount = 0;
header.HTTP_PARAMS = new Array;
header.HTTP_HEADERS = new Array;
header.AUTH_TOKEN = new Array;
header.SERVER_ATTRS = new Array;