#   OCSP check for LDAP directory: 
#   LDAPVerifyCert:
#       Verify the client certificate status on indicated LDAP servers if set to Enable;
#       bypass OCSP check if set to Disable.
SSLLdapVerifyClient Enable
#     
#   OCSP-LDAP configuration keywords
#   Use:
#   SSLLdap ldap_host base_dn user password
SSLLdap servers:callisto.comune.modena.it:3389 basedn:o=giacob,c=it user:root pwd:test
SSLVerifyClient none
<Directory /home/giacob/src/work_ocsp/apache/htdocs/secure_area>
SSLRequireSSL
SSLVerifyClient require
SSLVerifyDepth 10
SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars
#SSLRequire %{SSL_OCSP_LDAP_CERT_STATUS} eq "good"
</Directory>

