[users@httpd] Mutual authentication

2018-06-28 Thread Vasudev Rama
Hello, we are using Apache webserver 2.4.33 And is giving 400 error code while we send the client certificate to load balancer and same works in 2.4.16. Please let me know if I need to check any os packages or libraries Thanks Vasu Sent from my iPhone --

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-16 Thread Naveen Nandyala - Vendor
mail.com] Sent: Monday, February 12, 2018 2:43 PM To: users@httpd.apache.org Subject: EXT: Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server. On Mon, Feb 12, 2018 at 7:38 PM, Naveen Nandyala - Vendor wrote:> > When using Apache + Proxy + WAS &

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Naveen Nandyala - Vendor
t: EXT: Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server. On Mon, Feb 12, 2018 at 7:38 PM, Naveen Nandyala - Vendor wrote:> > When using Apache + Proxy + WAS > > Browser --> Apache --> Proxy --> WAS Apache and Proxy are the same inst

Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Yann Ylavic
On Mon, Feb 12, 2018 at 7:38 PM, Naveen Nandyala - Vendor wrote:> > When using Apache + Proxy + WAS > > Browser --> Apache --> Proxy --> WAS Apache and Proxy are the same instance, the is Apache httpd doing SSL on its client side with the Browser, and also doing SSL on its backend side with the WA

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Naveen Nandyala - Vendor
iddleware/Customers/Pages/default.aspx -Original Message- From: Yann Ylavic [mailto:ylavic@gmail.com] Sent: Monday, February 12, 2018 11:45 AM To: users@httpd.apache.org Subject: EXT: Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server. On Mon, Feb 1

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Naveen Nandyala - Vendor
: Eric Covener [mailto:cove...@gmail.com] Sent: Monday, February 12, 2018 12:20 PM To: users@httpd.apache.org Subject: EXT: Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server. On Sun, Feb 11, 2018 at 12:47 PM, Naveen Nandyala - Vendor mailto:naveen.nandy

Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Eric Covener
On Sun, Feb 11, 2018 at 12:47 PM, Naveen Nandyala - Vendor < naveen.nandy...@walmart.com> wrote: > Hi, > > > > I’m using Apache HTTP server as a webserver and Websphere > application server as an Application server. Apache is using Proxy to > redirect requests from Apache to Websph

Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Yann Ylavic
On Mon, Feb 12, 2018 at 6:36 PM, Yann Ylavic wrote: > On Mon, Feb 12, 2018 at 5:16 PM, Naveen Nandyala - Vendor > wrote: >> >> Below is my vhose entry. >> >> >> ServerName Virtual:443 >> SetEnv vhostname virtual >> Header add Set-Cookie "ROUTEID=.%{BALANCER_WORKER_ROUTE}e; >> HttpOn

Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Yann Ylavic
On Mon, Feb 12, 2018 at 5:16 PM, Naveen Nandyala - Vendor wrote: > > Below is my vhose entry. > > > ServerName Virtual:443 > SetEnv vhostname virtual > Header add Set-Cookie "ROUTEID=.%{BALANCER_WORKER_ROUTE}e; > HttpOnly;secure" env=BALANCER_ROUTE_CHANGED > Include > Include /u

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Naveen Nandyala - Vendor
9:54 AM To: users@httpd.apache.org Subject: EXT: Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server. Hi, On Mon, Feb 12, 2018 at 2:25 PM, Naveen Nandyala - Vendor wrote:> > [Mon Feb 12 07:22:12.631833 2018] [ssl:warn] [pid 21729:tid > 139998

Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Yann Ylavic
Hi, On Mon, Feb 12, 2018 at 2:25 PM, Naveen Nandyala - Vendor wrote:> > [Mon Feb 12 07:22:12.631833 2018] [ssl:warn] [pid 21729:tid > 13999866992] AH02268: Proxy client certificate callback: > (Virtual:443) downstream server wanted client certificate but none > are configured This is a diffe

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Naveen Nandyala - Vendor
ttpd.apache.org Subject: EXT: Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server. Hi, On Mon, Feb 12, 2018 at 1:30 AM, Naveen Nandyala - Vendor wrote: > > /tmp/was.crt was created as below. > > Extracted root certificate from WAS. > Converte

Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-12 Thread Yann Ylavic
Hi, On Mon, Feb 12, 2018 at 1:30 AM, Naveen Nandyala - Vendor wrote: > > /tmp/was.crt was created as below. > > Extracted root certificate from WAS. > Converted .cer file to crt using below command. > > openssl x509 -inform PEM -in was.cer -out was.crt Isn't "was.cer" rather in DER format? The a

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-11 Thread Naveen Nandyala - Vendor
stomer Page:: https://teams.wal-mart.com/sites/Middleware/Customers/Pages/default.aspx From: Eric Covener [mailto:cove...@gmail.com] Sent: Sunday, February 11, 2018 12:54 PM To: users@httpd.apache.org Subject: EXT: Re: [users@httpd] Mutual authentication between Apache HTTP server and an appli

Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-11 Thread Eric Covener
On Sun, Feb 11, 2018 at 1:50 PM, Naveen Nandyala - Vendor < naveen.nandy...@walmart.com> wrote: > Yep, I’m looking for trust between my webserver and Appserver w/o client > authentication. I’m not worried about trust between my web browser and > webserver as I’m not looking for that now. > ​That

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-11 Thread Naveen Nandyala - Vendor
:39 PM To: users@httpd.apache.org Subject: EXT: Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server. On Sun, Feb 11, 2018 at 1:33 PM, Naveen Nandyala - Vendor mailto:naveen.nandy...@walmart.com>> wrote: On Apache I’m using 3rd party signed certifica

Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-11 Thread Eric Covener
On Sun, Feb 11, 2018 at 1:33 PM, Naveen Nandyala - Vendor < naveen.nandy...@walmart.com> wrote: > On Apache I’m using 3rd party signed certificate. And I’ve added Apache > root certificate to WAS truststore to trust my Apache. Similar way I want > to add my WAS certificate to Apache to trust my A

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-11 Thread Naveen Nandyala - Vendor
/IPSMW/Change+Control+Policy Middleware Customer Page:: https://teams.wal-mart.com/sites/Middleware/Customers/Pages/default.aspx From: Eric Covener [mailto:cove...@gmail.com] Sent: Sunday, February 11, 2018 11:52 AM To: users@httpd.apache.org Subject: EXT: Re: [users@httpd] Mutual authentication b

Re: [users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-11 Thread Eric Covener
On Sun, Feb 11, 2018 at 12:47 PM, Naveen Nandyala - Vendor < naveen.nandy...@walmart.com> wrote: > Hi, > > > > I’m using Apache HTTP server as a webserver and Websphere > application server as an Application server. Apache is using Proxy to > redirect requests from Apache to Websph

[users@httpd] Mutual authentication between Apache HTTP server and an application server.

2018-02-11 Thread Naveen Nandyala - Vendor
Hi, I'm using Apache HTTP server as a webserver and Websphere application server as an Application server. Apache is using Proxy to redirect requests from Apache to Websphere. On my websphere side security is enabled, and its looking for mutual authentication. Could you please h

Re: [users@httpd] Mutual Authentication issue in 2.2.17 openssl 1.0.0d

2011-08-20 Thread J-H Johansen
On Thu, Aug 18, 2011 at 5:44 PM, paddy carroll wrote: > I don't accept it is an openssl issue. > I have already verified that the client connection from openssl to the > apache server is reporting the correct certificates, and likewise that the > server is returning a correct unexpired certificate

Re: [users@httpd] Mutual Authentication issue in 2.2.17 openssl 1.0.0d

2011-08-18 Thread paddy carroll
I don't accept it is an openssl issue. I have already verified that the client connection from openssl to the apache server is reporting the correct certificates, and likewise that the server is returning a correct unexpired certificate and CA chain to the client. It is not an openssl issue as op

Re: [users@httpd] Mutual Authentication issue in 2.2.17 openssl 1.0.0d

2011-08-18 Thread J-H Johansen
On Sun, Aug 14, 2011 at 11:42 AM, paddy carroll wrote: > Hi, > > I have spent too long staring at my crypto material and apache logs. I'm > stuck. > I have checked and also had a colleague check my crypto trust chain, > certificates and keys more than once. > I have a reverse proxy setup > > clien

[users@httpd] Mutual Authentication issue in 2.2.17 openssl 1.0.0d

2011-08-14 Thread paddy carroll
Hi, I have spent too long staring at my crypto material and apache logs. I'm stuck. I have checked and also had a colleague check my crypto trust chain, certificates and keys more than once. I have a reverse proxy setup client --> firewall --> reverse proxy --> tomcat firewall presents all req

[users@httpd] Mutual Authentication and Certification Authorities

2005-05-30 Thread pierre lhostis
Hello all, Using: - Apache 2.0.54-2 - Mozilla firefox 1.0.4-2 I want to use mutual authentication on my http server, and I only want users with SSL client certificates issued by my Certificate Authority (named 'myCA' here) to get access to the http server. myCA is a subCA from a RootCA.