List Info

Thread: Re: mod_ssl: behaviour with no client cert




Re: mod_ssl: behaviour with no client cert
country flaguser name
United States
1969-12-31 18:00:00
How do I unsubsribe to stop recieveing these emails?
-----Original Message-----
>From: Joshua Slive <joshuaslive.ca>
>Sent: Oct 24, 2007 10:34 AM
>To: usershttpd.apache.org
>Subject: Re: [usershttpd] mod_ssl: behaviour with no client
cert
>
>On 10/23/07, Peng, Thierry <THIERRY.PENGt-systems.ch> wrote:
>>
>>
>>
>>
>> Hi
>>
>>
>>
>> I have a question about the mod_ssl. I've enabled
the SSLVerifyClient in the
>> apache2.conf with the parameter require. This works
perfectly, although,
>> when a user does not have a certificate, it sends
only a not very meaningful
>> failure code back: in example -12195.
>>
>> Now, I'd like to replace this code with something,
that the users sends to
>> another page if he doesnt provide a certificate. Is
this possible, and if
>> yes, how?
>>
>
>I'm not an expert in this, but I think the trick is to
allow the
>client to negotiate the connection whether or not it has
the cert
>(using SSLVerifyClient optional) and then verify that
the cert is
>there using SSLRequire or mod_rewrite. The trick is that
you need an
>SSL connection setup in order to allow a decent error to
be
>transmitted over the connection.
>
>Joshua.
>
>--------------------------------------------------------
-------------
>The official User-To-User support forum of the Apache
HTTP Server Project.
>See <URL:http://htt
pd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribehttpd.apache.org
>   "   from the digest:
users-digest-unsubscribehttpd.apache.org
>For additional commands, e-mail: users-helphttpd.apache.org
>


------------------------------------------------------------
---------
The official User-To-User support forum of the Apache HTTP
Server Project.
See <URL:http://htt
pd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribehttpd.apache.org
   "   from the digest: users-digest-unsubscribehttpd.apache.org
For additional commands, e-mail: users-helphttpd.apache.org


Re: mod_ssl: behaviour with no client cert
user name
2007-10-24 10:52:00
On 10/24/07, William Westbrooks <wilwestbrooksearthlink.net> wrote:
>
> How do I unsubsribe to stop recieveing these emails?

Start by not being rude to all the other list subscribers.
One such
request for help is more than enough.

Then read the bottom of each list message:

> See <URL:http://htt
pd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribehttpd.apache.org
>    "   from the digest:
users-digest-unsubscribehttpd.apache.org
> For additional commands, e-mail: users-helphttpd.apache.org

And if you still have problems, go to
http://httpd.a
pache.org/userslist.html
where you will find an email address for the list owner (who
happens to be me).

Joshua.

------------------------------------------------------------
---------
The official User-To-User support forum of the Apache HTTP
Server Project.
See <URL:http://htt
pd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribehttpd.apache.org
   "   from the digest: users-digest-unsubscribehttpd.apache.org
For additional commands, e-mail: users-helphttpd.apache.org


[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )