On Wed, Aug 16, 2000, Gabriel Ciuloaica wrote:
> I made this, but I still get an error:
> When the window Client Authentification I can't select any certificate .
> Try to connect to https://bam.codec.ro/ssl/download/ and you'll see what I
> mean.
> [...]
> > That should be something like:
> > SSLCACertificateFile "/home/httpd/conf/ssl.crt/server.crt"
> >
> > change path to be correct. Also make sure that this is actually a CA
> certificate.
Err... are you sure you really want to use the _SERVER_ certificate for
authenticating your _CLIENTS_? This is certainly wrong and not what you want.
The certificate you specify with SSLCACertificateFile should be a CA
certificate (the one which was used when your client certs were issued!) and a
server certificate (as the path ssl.crt/server.crt indicates) is usually not
of this type.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]