Re: SSLVerifyClient applies to parent directory

Florian Hackenberger a écrit :
> On Friday 27 June 2008, Cuesta Gilles wrote:
>   
>> It's more an apache specific question; try setting
>> Options +Indexes
>> in your vhost, allowing directory listing.
>>     
> Thanks, but that is certainly not the problem, as apache creates a 
> listing as soon as I remove 'SSLVerifyClient require'.
>
> Cheers,
> 	Florian
>
>   
That seems to point that it's already activated.

For your issue, two questions:
- is a VerifyDepth 1 enough for verification chaining ?
- No default VerifyClient by default for VirtualHost
Try adding:

SSLVerifyClient none

or 

<Directory /usr/local/htdocs>
       	SSLVerifyClient none
</Directory>

Listen 443
<VirtualHost *:443>
        SSLEngine On
        SSLCertificateFile /etc/apache2/ssl/acoveo.com.pem
        DocumentRoot "/usr/local/htdocs"

	SSLVerifyClient none

	<Directory /usr/local/htdocs/directory/subdirectory>
        	SSLVerifyClient require
	        SSLVerifyDepth 1
	</Directory>
</VirtualHost>

-- 
Chuck Norris comprend Lassie et Flipper le dauphin. C'est d'ailleurs lui qui à réalisé les traductions dans l'intégralité des épisodes !
Gilles CUESTA - Logiciels Libres
69139920

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIZKPs545quQSHen8RArh4AKDE5GhQxCMN4D8rWH6RwCpH+a7byQCgysFn
HWMukDrO3hjVCtt3gIYQrx4=
=3gmd
-----END PGP SIGNATURE-----