This is the template in apache SSL virtual host:
Check the SSLRequire directive, which applies to specific clients,
considering a previous directive ( SSLCACertificateFile
/etc/apache2/ssl.crt/ca-bundle.crt) has verified the client's cert is issued
by a valid CA. Notice it can also be applied to specific <Location/>
s and hour of the day, etc., etc.
# Access Control:
# With SSLRequire you can do per-directory access control based
# on arbitrary complex boolean expressions containing server
# variable checks and other lookup directives. The syntax is a
# mixture between C and Perl. See the mod_ssl documentation
# for more details.
#<Location />
#SSLRequire ( %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
# and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd." \
# and %{SSL_CLIENT_S_DN_OU} in {"Staff", "CA", "Dev"} \
# and %{TIME_WDAY} >= 1 and %{TIME_WDAY} <= 5 \
# and %{TIME_HOUR} >= 8 and %{TIME_HOUR} <= 20 ) \
# or %{REMOTE_ADDR} =~ m/^192\.76\.162\.[0-9]+$/
#</Location>
--
View this message in context:
http://www.nabble.com/One-CA-for-many-clients-%28a-silly-question%29-tp24510806p24559656.html
Sent from the OpenSSL - User mailing list archive at Nabble.com.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
