Re: [us...@httpd] allow client certs as alternative to basic auth

2010-10-16 Thread Igor Galić
- "André Pinto" wrote: > exist any solution? Not yet. At least not that I know of (I've emptied my local mailbox :) Take a look at: http://marc.info/?l=apache-httpd-dev&w=2&r=1&s=fakebasicauth&q=b i -- Igor Galić Tel: +43 (0) 664 886 22 883 Mail: i.ga...@brainsware.org URL: http://brain

Re: [us...@httpd] allow client certs as alternative to basic auth

2010-10-16 Thread André Pinto
exist any solution? - The official User-To-User support forum of the Apache HTTP Server Project. See http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from th

Re: [us...@httpd] allow client certs as alternative to basic auth

2010-10-16 Thread Igor Galić
- "André Pinto" wrote: > > why when the user put a valid certificate the server still asking > user > > name and > > password?? Because "Satisfy any", in fact, doesn't. dev@ is looking into making this an option. > > > > # Inside the subarea any Intranet access is allowed > > # but f

[us...@httpd] allow client certs as alternative to basic auth

2010-10-16 Thread André Pinto
why when the user put a valid certificate the server still asking user name and password?? # Inside the subarea any Intranet access is allowed # but from the Internet only HTTPS + Strong-Cipher + Password # or the alternative HTTPS + Strong-Cipher + Client-Certificate # If HTTPS is u