httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Ruediger Pluem <>
Subject Re: SSLVerifyClient in <Directory>
Date Sun, 06 Dec 2009 17:52:54 GMT

On 12/06/2009 06:19 PM, Ricky Burgin wrote:
> Hello all,
> I've heard about the recent vulnerability regarding SSL renegotiations
> and from what I can tell, it seems to have broken the usage of
> SSLVerifyClient inside a httpd <Directory> directive.
> I'm trying to get Apache to verify client certificates, but only for a
> specific directory on my website, yet it only seems to kick in and work
> if I do it inside the <VirtualHost> directive, but not inside a
> <Directory> directive.
> I'm going by the examples presented on
> yet
> they seem to suffer from the exact same issue.
> Any help would be appreciated.

I cannot confirm this. Please post to the users list and provide the configuration
and the issues you faced.



View raw message