Client Authentication
"Hoda Nadeem" <[email protected]>
| Newsgroups | gmane.comp.apache.user,gmane.comp.apache.mod-ssl.user |
|---|---|
| Message-ID | <EE780E457BC23344B61438FE3608F16E6A2F59@MCLNEXVS07.resource.ds.bah.com> |
I am working on an SSL interface with smart cards with on board certificates. I have enabled client authentication in apache through the following lines: SSLVerifyClient require SSLVerifyDepth 1 SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key And, the server definitely requests the client certificate, but I get the following errors: [Sun Apr 03 04:02:04 2005] [warn] Init: Oops, you want to request client authentication, but no CAs are known for verification!? [Hint: SSLCACertificate*] [Sun Apr 03 04:02:04 2005] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!? [Mon Apr 04 09:07:04 2005] [error] Certificate Verification: Error (20): unable to get local issuer certificate The second error is obviously because I have a test certificate on my server. Following these errors, the system hangs...stays indefinitely in waiting state, or goes to 'page cannot be found' Any help is appreciated. Thanks. Nadeem