Re: [users@httpd] mod_ssl, client certificates and r->username

2011-01-24 Thread David (Dave) Donnan
Hello. FYI; If you want to use the following: SSLUserName *SSL_CLIENT_S_DN_UID* You need (equal to, or greater than) httpd-2.2.14. See BUG https://issues.apache.org/bugzilla/show_bug.cgi?id=45107 I'm not sure why the BUG has been reopened - It works great, for me, with httpd-2.2.14. PS: Y

Re: [users@httpd] mod_ssl, client certificates and r->username

2011-01-21 Thread Tom Evans
On Fri, Jan 21, 2011 at 11:18 AM, Martin Kuba wrote: > Then I think that what you are looking for is the SSLUserName directive > http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslusername > > Cheers > > Martin Doh, how did I miss that one?! Thanks so much Martin! Cheers Tom

Re: [users@httpd] mod_ssl, client certificates and r->username

2011-01-21 Thread Martin Kuba
Dne 21.1.2011 12:11, Tom Evans napsal(a): Ah, see that's the thing - they can also authenticate in other ways, I was slightly simplifying the situation. I was hoping that I could get the same user information into the access logs regardless of how they authenticate. Then I think that what you a

Re: [users@httpd] mod_ssl, client certificates and r->username

2011-01-21 Thread Tom Evans
On Fri, Jan 21, 2011 at 11:07 AM, Martin Kuba wrote: > Hi Tom, > > the normal access log does not contain SSL information. If you want it, > create a special log using the directive CustomLog, i.e. > > > CustomLog "|/usr/bin/cronolog /var/log/apache2/%Y/%m/%d/ssl_request.log" > "%v:%p %h %l %u %t

Re: [users@httpd] mod_ssl, client certificates and r->username

2011-01-21 Thread Martin Kuba
Hi Tom, the normal access log does not contain SSL information. If you want it, create a special log using the directive CustomLog, i.e. CustomLog "|/usr/bin/cronolog /var/log/apache2/%Y/%m/%d/ssl_request.log" "%v:%p %h %l %u %t \"%r\" %>s %b \"%{User-Agent}i\" SSL_PROTOCOL=%{SSL_PROTOCOL}x SSL

[users@httpd] mod_ssl, client certificates and r->username

2011-01-21 Thread Tom Evans
Hi all Apache/2.2.17 (FreeBSD) I'm trying to use client certificates to authenticate my few users. I created a self-signed CA, server certificates and user certificates, and installed them in the appropriate places. I then created a vhost: ServerName rc.ketbun.com SSLEngine on SSLCe