Re: SSLVerifyClient

[email protected] Tue, 28 Jun 2005 11:01:32 -0400

Newsgroups	gmane.comp.apache.mod-ssl.user
Message-ID	<[email protected]>

This can't be the problem, as I specify the CA using  
SSLCACertificatePath using the proper HASH names. I've also tried  
SSLCACertificateFile.

using s_client with SSLVerifyClient optional, it shows that the  
server is correctly identifying which CAs are allowed.

I think the problem is with Safari and Keychain. I shall look further  
into the matter.

On Jun 28, 2005, at 10:27 AM, Paul Puschmann wrote:

> I think that Eckard Wille might be right. So have some experiments  
> with
> your ca-files and certificates.