Unhandled Critical Extensions

2006-06-07 Thread Diarmuid Curtin
Hi, How does MOD_SSL call OpenSSL for the purpose of Certificate Verification? I have a certificate which has the critical extension 'Name Constraints', when I parse the cert with OpenSSL 0.9.8(b) it seems OpenSSL understands the Certificate, however, when I present the cert to Apache, it fails wit

Re: Unhandled Critical Extensions

2006-06-07 Thread Patrick Patterson
Hi Diarmuid: On Wednesday 07 June 2006 14:50, Diarmuid Curtin wrote: > Hi, > > How does MOD_SSL call OpenSSL for the purpose of Certificate Verification? > I have a certificate which has the critical extension 'Name Constraints', > when I parse the cert with OpenSSL 0.9.8(b) it seems OpenSSL under

Re: Unhandled Critical Extensions

2006-06-07 Thread Diarmuid Curtin
Hi Patrick -   I agree, it acting in accordance to the RFC - any critical extensions it does not understand, it rejects.   Seems to me that name constraint handling marked as critical would be nice to have...   DC   On 6/7/06, Patrick Patterson <[EMAIL PROTECTED]> wrote: Hi Diarmuid:On Wednesday

Re: Mod_proxy and client certificate auth

2006-06-07 Thread BJ Swope
>From everything I've heard and read, mod-proxy will not proxy HTTPS on the back like what you are asking.  You can have HTTPS on the front end but not on the back.  It will have to be HTTP to the back. If you get this working I would LOVE to hear how you got it done On 6/6/06, Paul D. Robert