Re: SSLVerifyClient

[email protected] Wed, 29 Jun 2005 09:50:54 -0400

Newsgroups	gmane.comp.apache.mod-ssl.user
Message-ID	<[email protected]>

Indeed, the trouble was with Safari and Keychain. Apparently, having  
more than one certificate confuses Safari. I am not sure what to do  
now, except get a different browser. Any advice would be appreciated.

On Jun 28, 2005, at 11:01 AM, [email protected] wrote:

> This can't be the problem, as I specify the CA using  
> SSLCACertificatePath using the proper HASH names. I've also tried  
> SSLCACertificateFile.
>
> using s_client with SSLVerifyClient optional, it shows that the  
> server is correctly identifying which CAs are allowed.
>
> I think the problem is with Safari and Keychain. I shall look  
> further into the matter.
>
> On Jun 28, 2005, at 10:27 AM, Paul Puschmann wrote:
>
>> I think that Eckard Wille might be right. So have some experiments  
>> with
>> your ca-files and certificates.
>