On Tue, Dec 15, 1998, Enrico Badella wrote:
> > Hello Ralf S. Engelschall, in a previous mail you wrote:
> >
> > > Does anyone know an existing webserver on the net where SSL client
> > > authentication is requested on a per-URL basis? And does anyone know the URL
> > > of such a server, so I can establish a test-connection to it?
> >
> > Does really no one have a Netscape Commerce server running somewhere at the
> > company or at least knows one which uses per-URL client authentication? I
> > really have to compare mod_ssl+SSLeay's behavior with the one of a non-SSLeay
> > based SSL-aware webserver.
>
> Are you looking for a prehistoric Netscape Commerce server? If so
> I could try to resurrect one that is one one of my machines and
> is no longer used. The only hassle could be an expired certificate
> but I could issue a new one without problems.
I think an old Netscape Commerce server should be fine, too.
As long as it can be configured for my tests to do the following:
1. It globally doesn't request a client certificate.
2. But for a particular URL client authentication is enabled
and the server request a client certificate for it.
3. The machine is reachable via the Internet, of course.
Anything else is not important, for instance it's ok when the certificate is
expired and it's even ok that the URL has no real contents and the server
doesn't allow access finally to me. So, a pretty ugly configuration should be
enough. I just want to _try_ to connext in order to observe the SSL protocol
details the Netscape server uses when forcing the SSL renegotation. The
remaining communication is not really important.
So, when you can help me with such a test, I would be happy. You can also
contact me directly in case you don't want to publish the URL to this server.
And I need it only once. After the test you can kick down the beast and use
mod_ssl, of course ;-)
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
