Re: [users@httpd] SSL library error 1 in handshake

2011-01-19 Thread g f
Martin, very nice! I will give that a shot. I appreciate your effort on this as well as others that have posted. Cheers! G40 On Wed, Jan 19, 2011 at 1:50 AM, Martin Kuba wrote: > Dne 18.1.2011 18:12, g f napsal(a): > > Hey Martin, >> common access cards are smart cards that allow a user to auth

Re: [users@httpd] SSL library error 1 in handshake

2011-01-18 Thread Martin Kuba
Dne 18.1.2011 18:12, g f napsal(a): Hey Martin, common access cards are smart cards that allow a user to authenticate to a domain using just the card(inserted into the card reader) and a pin number. The directive */SSLVerifyClient require/* requires all https access utilize a smart card. no sm

Re: [users@httpd] SSL library error 1 in handshake

2011-01-18 Thread g f
Hey Martin, common access cards are smart cards that allow a user to authenticate to a domain using just the card(inserted into the card reader) and a pin number. The directive *SSLVerifyClient require* requires all https access utilize a smart card. no smart card, no access. *SSLVerifyClient opt

Re: [users@httpd] SSL library error 1 in handshake

2011-01-18 Thread Alan Brown
@httpd.apache.org Sent: Tuesday, January 18, 2011 3:36 PM Subject: Re: [users@httpd] SSL library error 1 in handshake Hello Martin, thanks for the reply. I have those directives already and it all works until I add: SSLVerifyClient require I changed this directive to optional and it se

Re: [users@httpd] SSL library error 1 in handshake

2011-01-18 Thread Martin Kuba
Hi G40, I am a bit confused from your description, I do not know what you mean by "common access cards" and what you mean by forcing them. Also I do not understand where is your python proxy, is it on the server or on the client ? I have a suspicion that you are mixing the client and the server

Re: [users@httpd] SSL library error 1 in handshake

2011-01-18 Thread Joost de Heer
On Tue, January 18, 2011 16:16, g f wrote: > Hello all, > I have a debian os running Apache 2.2.16(debian) along with tomcat 6.0.29. > I > use mod_jk as well as mod_auth_kerb module for apache. Apache and the > modules are debian repository packages. > > I recently attempted to activate common acce

Re: [users@httpd] SSL library error 1 in handshake

2011-01-18 Thread g f
Hello Martin, thanks for the reply. I have those directives already and it all works until I add: *SSLVerifyClient require* I changed this directive to *optional* and it seems to work now, though I am not so confidant in this configuration. I wonder if there is a way to pass the client cert throug

Re: [users@httpd] SSL library error 1 in handshake

2011-01-18 Thread Martin Kuba
Hi G40, the "SSLVerifyClient require" requires that the client presents a certificate. You have to configure also the list of Certification Authorities that the server accepts by the following directives: SSLCACertificatePath /etc/ssl/certs/ or SSLCACertificateFile /etc/apache2/ssl.crt/ca-bund

[users@httpd] SSL library error 1 in handshake

2011-01-18 Thread g f
Hello all, I have a debian os running Apache 2.2.16(debian) along with tomcat 6.0.29. I use mod_jk as well as mod_auth_kerb module for apache. Apache and the modules are debian repository packages. I recently attempted to activate common access cards and if I just activate them but do not force th