Re: [users@httpd] SSL Client Certificates and CGI

2012-10-01 Thread Mark Montague
On October 1, 2012 15:47 , Tom Browder wrote: The solution -- as far as Apache HTTP Server is concerned -- is [1] > to move the CGIs into the area in 1, or, alternatively, [2] >configure area in 2 to also require clients to present SSL certificates. [3]> If you prefer, you can make client ce

Re: [users@httpd] SSL Client Certificates and CGI

2012-10-01 Thread Tom Browder
On Mon, Oct 1, 2012 at 2:28 PM, Mark Montague wrote: > On October 1, 2012 14:58 , Tom Browder wrote: >> On Mon, Oct 1, 2012 at 10:53 AM, Mark Montague wrote: >>> On October 1, 2012 9:17 , Tom Browder wrote: ... I have found that the configuration doesn't restrict CGI programs at all

Re: [users@httpd] SSL Client Certificates and CGI

2012-10-01 Thread Mark Montague
On October 1, 2012 14:58 , Tom Browder wrote: On Mon, Oct 1, 2012 at 10:53 AM, Mark Montague wrote: On October 1, 2012 9:17 , Tom Browder wrote: Inside the restricted area I have: SSLVerifyClient require I have found that the configuration doesn't restrict CGI programs at all as I hav

Re: [users@httpd] SSL Client Certificates and CGI

2012-10-01 Thread Tom Browder
On Mon, Oct 1, 2012 at 10:53 AM, Mark Montague wrote: > On October 1, 2012 9:17 , Tom Browder wrote: >> >> Inside the restricted area I have: >> >>SSLVerifyClient require >> >> I have found that the configuration doesn't restrict CGI programs at >> all as I have them placed ... > Then someth

Re: [users@httpd] SSL Client Certificates and CGI

2012-10-01 Thread Mark Montague
On October 1, 2012 9:17 , Tom Browder wrote: Inside the restricted area I have: SSLVerifyClient require The reason I do that is to log access by my clients even though they don't attempt to enter the restricted area. I have found that the configuration doesn't restrict CGI programs at al

Re: [users@httpd] SSL Client Certificates and CGI

2012-10-01 Thread Tom Browder
On Mon, Oct 1, 2012 at 7:54 AM, Mark Montague wrote: >> On Sun, Sep 30, 2012 at 7:44 PM, Mark Montague wrote: >>> On September 30, 2012 19:45 , Tom Browder wrote: Does anyone have a pointer to help on restricting a directory to access only with valid SSL Client Certificates and ho

Re: [users@httpd] SSL Client Certificates and CGI

2012-10-01 Thread Mark Montague
On October 1, 2012 5:41 , Tom Browder wrote: On Sun, Sep 30, 2012 at 7:44 PM, Mark Montague wrote: On September 30, 2012 19:45 , Tom Browder wrote: Does anyone have a pointer to help on restricting a directory to access only with valid SSL Client Certificates and how to work CGI scripts to r

Re: [users@httpd] SSL Client Certificates and CGI

2012-10-01 Thread Tom Browder
On Sun, Sep 30, 2012 at 7:44 PM, Mark Montague wrote: > On September 30, 2012 19:45 , Tom Browder wrote: >> >> Does anyone have a pointer to help on restricting a directory to >> access only with valid SSL Client Certificates and how to work CGI >> scripts to respect that restriction? ... > So yo

Re: [users@httpd] SSL Client Certificates and CGI

2012-09-30 Thread Mark Montague
On September 30, 2012 19:45 , Tom Browder wrote: Does anyone have a pointer to help on restricting a directory to access only with valid SSL Client Certificates and how to work CGI scripts to respect that restriction? I have been successful restricting direct access, but it seems that certain c

[users@httpd] SSL Client Certificates and CGI

2012-09-30 Thread Tom Browder
Does anyone have a pointer to help on restricting a directory to access only with valid SSL Client Certificates and how to work CGI scripts to respect that restriction? I have been successful restricting direct access, but it seems that certain cgi programs can access the directory with impunity.