Martin,
very nice!
I will give that a shot.
I appreciate your effort on this as well as others that have posted.
Cheers!
G40
On Wed, Jan 19, 2011 at 1:50 AM, Martin Kuba wrote:
> Dne 18.1.2011 18:12, g f napsal(a):
>
> Hey Martin,
>> common access cards are smart cards that allow a user to auth
Dne 18.1.2011 18:12, g f napsal(a):
Hey Martin,
common access cards are smart cards that allow a user to authenticate to a
domain using just the card(inserted into the card reader) and a pin number.
The directive
*/SSLVerifyClient require/*
requires all https access utilize a smart card. no sm
Hey Martin,
common access cards are smart cards that allow a user to authenticate to a
domain using just the card(inserted into the card reader) and a pin number.
The directive
*SSLVerifyClient require*
requires all https access utilize a smart card. no smart card, no access.
*SSLVerifyClient opt
@httpd.apache.org
Sent: Tuesday, January 18, 2011 3:36 PM
Subject: Re: [users@httpd] SSL library error 1 in handshake
Hello Martin,
thanks for the reply.
I have those directives already and it all works until I add:
SSLVerifyClient require
I changed this directive to optional and it se
Hi G40,
I am a bit confused from your description, I do not know what you mean
by "common access cards" and what you mean by forcing them.
Also I do not understand where is your python proxy, is it on the server or on
the client ?
I have a suspicion that you are mixing the client and the server
On Tue, January 18, 2011 16:16, g f wrote:
> Hello all,
> I have a debian os running Apache 2.2.16(debian) along with tomcat 6.0.29.
> I
> use mod_jk as well as mod_auth_kerb module for apache. Apache and the
> modules are debian repository packages.
>
> I recently attempted to activate common acce
Hello Martin,
thanks for the reply.
I have those directives already and it all works until I add:
*SSLVerifyClient require*
I changed this directive to *optional* and it seems to work now, though I am
not so confidant in this configuration.
I wonder if there is a way to pass the client cert throug
Hi G40,
the "SSLVerifyClient require" requires that the client presents a certificate.
You have to configure also the list of Certification Authorities that
the server accepts by the following directives:
SSLCACertificatePath /etc/ssl/certs/
or
SSLCACertificateFile /etc/apache2/ssl.crt/ca-bund
Hello all,
I have a debian os running Apache 2.2.16(debian) along with tomcat 6.0.29. I
use mod_jk as well as mod_auth_kerb module for apache. Apache and the
modules are debian repository packages.
I recently attempted to activate common access cards and if I just activate
them but do not force th