On Wed, Aug 20, 2003 at 10:56:11AM +0200, Hendrik Robbel wrote:
> Hi,
>
> I tried to nest two <directory> with SSLRequire entries:
>
> <Directory /htdocs-ssl/user/>
> SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ \
> and %{SSL_CLIENT_S_DN_O} eq "user" )
> </Directory>
>
>
> <Directory /htdocs-ssl/>
> SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)-/ \
> and %{SSL_CLIENT_S_DN_O} eq "Global" )
> </Directory>
>
>
>
> But I got a 403 when I tried to access the /htdocs-ssl/user/ with a
> certificate, which
> have the organisation entry "user".
>
Why not just use REQUEST_URI as part of your SSLRequire statement
instead of wrapping it in <Directory?
vh
Mads Toftum
--
`Darn it, who spiked my coffee with water?!' - lwall
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
