Hey,
Set up client certificate authentication on Apache/RH7.
When trying to browse a directory that is protected like this...
Alias /DRkit/ "/var/www/html/DRkit/"
<Directory "/var/www/html/DRkit">
    AllowOverride None
    Options ExecCGI
    Order allow,deny
    Allow from all
    SSLVerifyClient require
    SSLVerifyDepth 5
    SSLRequireSSL
    SSLOptions +StrictRequire +StdEnvVars +ExportCertData
</Directory>

I get the standard error in Browser...
The page cannot be displayed The page you are looking for is currently
unavailable. The Web site might be experiencing technical difficulties, or
you may need to adjust your browser settings.

And when i check the error log in Apache...
OpenSSL: error:1408F071:SSL routines:SSL3_GET_RECORD:bad mac decode [Hint:
Browser still remembered details of a re-created server certificate?]
Ive made sure of the obvious things like the Personal Certificate can be
verified properly by the correct bundle of CA certs in the CACertificateFile
command, as I use the same file on another server....

any ideas please, 
Barrie

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to