Re: [us...@httpd] How to ignore common name during client certificate verification?

2010-07-15 Thread galaft wang
On Wed, Jul 14, 2010 at 6:59 PM, Eric Covener wrote: > On Tue, Jul 13, 2010 at 10:21 PM, galaft wang wrote: > > Hi, > > Normally, CN would be IP address of the client, if client IP do not match > > its certificate CN, Apache would deny its request. This is used in highly

Re: [us...@httpd] How to ignore common name during client certificate verification?

2010-07-13 Thread galaft wang
trusted CA. If yes, accept client, if not, deny client. So, I just need to verify client certificates "partly", what can I do? Br, Jason On Tue, Jul 13, 2010 at 7:12 PM, Eric Covener wrote: > On Tue, Jul 13, 2010 at 3:23 AM, galaft wang wrote: > > Hi, > > > > As we

[us...@httpd] How to ignore common name during client certificate verification?

2010-07-13 Thread galaft wang
Hi, As we know, directive SSLVerifyClient in mod_ssl can be used for Client Authentication SSLVerifyClient require It means the client *has to* present a valid Certificate However, for specific purpose, I only want to verify: whether client's certificate is issued by trusted CA. I do not want t

[us...@httpd] build 32 bit httpd on 64 bit RHEL

2010-01-12 Thread galaft wang
Hi, I am compiling 32 bit httpd on 64 bit RHEL with following command: # ./configure CFLAGS=-m32 CXXFLAGS=-m32 FFLAGS=-m32 FCFLAGS=-m32 --prefix=/root/j131/testhttpd/apache-32bit But make failed with following error message: # make Making all in srclib make[1]: Entering directory `/root/j131/te