RE: mod_ssl: SSLRequire

 
>[email protected] wrote:
>> Perhaps
>>   SSLVerifyClient require
>> 
>> Default is
>>   SSLVerifyClient none

>Good idea, but  this is set already (otherwise the
>client would not authentify with the certificate)
>for this virtual host. Moving it into the directory
>section does not change anything either. And VerifyDepth
>is set, too...

How deep is VerifyDepth ? 

I know it will be a big file, but for this purposes i use to turn on
"LogLevel Debug" than the error_log will become very verbose.
There Apache will tell if your "testuser" will be checked or not .

>Olaf

bye

Oliver


-- 
Dipl.Inform. Olaf Gellert                  PRESECURE (R)
Senior Researcher,                       Consulting GmbH
Phone: (+49) 0700 / PRESECURE           [email protected]

                        A daily view on Internet Attacks
                        https://www.ecsirt.net/sensornet

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]