httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Serge Dubrouski" <serge...@gmail.com>
Subject Re: [users@httpd] Does apache check client certificate even if SSLVerifyClient is none?
Date Tue, 23 Jan 2007 23:06:31 GMT
Do you know how what kind of a proxy and how it's configured? To help
you out with your problem it would be good to know both ends of a
channel.

On 1/23/07, DEVAL SHAH <devals9@hotmail.com> wrote:
> Hi Serge,
> No it is not a regular browser. It is some proxy which our clients use.
>
> Thank you.
>
>
> >From: "Serge Dubrouski" <sergeyfd@gmail.com>
> >Reply-To: users@httpd.apache.org
> >To: users@httpd.apache.org
> >Subject: Re: [users@httpd] Does apache check client certificate even if
> >SSLVerifyClient is none?
> >Date: Tue, 23 Jan 2007 15:46:12 -0700
> >
> >How does a client send a certificate if Apache doesn't ask for it?
> >What kind of a "client" do you have? Is it a regular browser?
> >
> >On 1/23/07, DEVAL SHAH <devals9@hotmail.com> wrote:
> >>Hello,
> >>I have a configuration in Apache file setup for SSL. I am not doing client
> >>authentication as
> >>SSLVerifyClient is commented ie.
> >>#SSLVerifyClient none
> >>
> >>It works fine for few people. When a client sends a certificate it does
> >>not
> >>work. Our logs indicate this error:
> >>SSL Library Error: 336151570 error:14094412:SSL
> >>routines:SSL3_READ_BYTES:sslv3 alert bad certificate Subject CN in
> >>certificate not server name or identical to CA!?
> >>
> >>Any idea what I should do to resolve this?
> >>
> >>Thank you in advance
> >>Deval
> >>
> >>
> >>
> >>---------------------------------------------------------------------
> >>The official User-To-User support forum of the Apache HTTP Server Project.
> >>See <URL:http://httpd.apache.org/userslist.html> for more info.
> >>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> >>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> >>For additional commands, e-mail: users-help@httpd.apache.org
> >>
> >>
> >
> >---------------------------------------------------------------------
> >The official User-To-User support forum of the Apache HTTP Server Project.
> >See <URL:http://httpd.apache.org/userslist.html> for more info.
> >To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> >   "   from the digest: users-digest-unsubscribe@httpd.apache.org
> >For additional commands, e-mail: users-help@httpd.apache.org
> >
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message