httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "DEVAL SHAH" <deva...@hotmail.com>
Subject Re: [users@httpd] Does apache check client certificate even if SSLVerifyClient is none?
Date Tue, 23 Jan 2007 23:02:23 GMT
Hi Serge,
No it is not a regular browser. It is some proxy which our clients use.

Thank you.


>From: "Serge Dubrouski" <sergeyfd@gmail.com>
>Reply-To: users@httpd.apache.org
>To: users@httpd.apache.org
>Subject: Re: [users@httpd] Does apache check client certificate even if 
>SSLVerifyClient is none?
>Date: Tue, 23 Jan 2007 15:46:12 -0700
>
>How does a client send a certificate if Apache doesn't ask for it?
>What kind of a "client" do you have? Is it a regular browser?
>
>On 1/23/07, DEVAL SHAH <devals9@hotmail.com> wrote:
>>Hello,
>>I have a configuration in Apache file setup for SSL. I am not doing client
>>authentication as
>>SSLVerifyClient is commented ie.
>>#SSLVerifyClient none
>>
>>It works fine for few people. When a client sends a certificate it does 
>>not
>>work. Our logs indicate this error:
>>SSL Library Error: 336151570 error:14094412:SSL
>>routines:SSL3_READ_BYTES:sslv3 alert bad certificate Subject CN in
>>certificate not server name or identical to CA!?
>>
>>Any idea what I should do to resolve this?
>>
>>Thank you in advance
>>Deval
>>
>>
>>
>>---------------------------------------------------------------------
>>The official User-To-User support forum of the Apache HTTP Server Project.
>>See <URL:http://httpd.apache.org/userslist.html> for more info.
>>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
>>For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message