Hi, I'm trying to set up a SSL site supporting *either* client authentification via certificates or password-based basic authentification.
To be clear, a client may connect if he has a certificate, or if he provides a correct login/password. What I want is pretty much like the HOW-TO (<URL:http://www.modssl.org/docs/2.8/ssl_howto.html#ToC10>) except for the http access part. I use SSLRequireSSL instead of the Rewrite thing to force HTTPS access. The result is clients with valid certificates get a 403 Forbidden error. <VirtualHost _default_:443> ServerName www.mgarnier.net SSLEngine On DocumentRoot ... ErrorLog "/usr/local/apache/logs/www.mgarnier.net.error_log" TransferLog "/usr/local/apache/logs/www.mgarnier.net.access_log" LogLevel debug <Location /> SSLVerifyClient optional SSLVerifyDepth 1 SSLOptions +StrictRequire +FakeBasicAuth SSLRequireSSL Satisfy any Order Deny,Allow Deny from all Allow from 192.168.0.0/16 AuthType Basic AuthName "Site prive - Famille Garnier" AuthUserFile "/usr/local/apache/conf/mgarnier.users" AuthGroupFile "/usr/local/apache/conf/mgarnier.groups" Require valid-user </Location> </VirtualHost> Any help appreciated. Thanks in advance. cube -- FTW ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
