Client Authentication

"Hoda Nadeem" <[email protected]>
Newsgroups gmane.comp.apache.user,gmane.comp.apache.mod-ssl.user
Message-ID <EE780E457BC23344B61438FE3608F16E6A2F59@MCLNEXVS07.resource.ds.bah.com>
 
I am working on an SSL interface with smart cards with on board
certificates. 
 
I have enabled client authentication in apache through the following
lines: 
 
SSLVerifyClient require
SSLVerifyDepth 1
SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key

And, the server definitely requests the client certificate, but I get
the following errors:
 
[Sun Apr 03 04:02:04 2005] [warn] Init: Oops, you want to request client
authentication, but no CAs are known for verification!?  [Hint:
SSLCACertificate*]
[Sun Apr 03 04:02:04 2005] [warn] RSA server certificate CommonName (CN)
`localhost.localdomain' does NOT match server name!?
[Mon Apr 04 09:07:04 2005] [error] Certificate Verification: Error (20):
unable to get local issuer certificate

The second error is obviously because I have a test certificate on my
server.
 
Following these errors, the system hangs...stays indefinitely in waiting
state, or goes to 'page cannot be found'
 
Any help is appreciated. 
 
Thanks. 
 
Nadeem
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.