httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 52630] Firefox can't access SSL websites with client authentication and when using a symlink to a directory of CA certs
Date Sat, 11 Feb 2012 14:32:04 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=52630

Christoph Anton Mitterer <calestyo@scientia.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|INVALID                     |

--- Comment #6 from Christoph Anton Mitterer <calestyo@scientia.net> 2012-02-11 14:32:04
UTC ---
Well you're really quite fast in just closing a bug as you believe you cannot
immediately reproduce it.... a bit impolite IMHO, given that people try to
improve apache and put their time in... nevertheless...


As I've said I believed in the first place that this was an Firefox bug....
therefore I posted most stuff there.


I know that the error message indicates that the cert is not found, but this is
maybe simply wrong.
There are no intermediate certs and there is no reason why mod_ssl shouldn't be
able to locate it. The paths are correct, the certificates are all in place
with the correct names.

Neither am I studpid and thus I know that these are relative paths, the
directory hierarchy IS in place.


So reopening the bug and, again, pointing to the main two issues here:
- something seem to be fishy between FF and Apache, as it works with Chromimum
in both cases
- something seems to be buggy in Apache either Apache or OpenSSL, as it also
works with Apache, but only when I don't use a symlink to the directory.


Cheers,
Chris.

btw: I know that SSLCADNRequestPath defaults to SSLCACertificatePath, but it
shouldn't hurt to set it, which I do to keep configuration homogeneous among
all our webservers.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message