Hi,
How does MOD_SSL call OpenSSL for the purpose of Certificate Verification? I have a certificate which has the critical extension 'Name Constraints', when I parse the cert with OpenSSL 0.9.8(b) it seems OpenSSL understands the Certificate, however, when I present the cert to Apache, it fails wit
Hi Diarmuid:
On Wednesday 07 June 2006 14:50, Diarmuid Curtin wrote:
> Hi,
>
> How does MOD_SSL call OpenSSL for the purpose of Certificate Verification?
> I have a certificate which has the critical extension 'Name Constraints',
> when I parse the cert with OpenSSL 0.9.8(b) it seems OpenSSL under
Hi Patrick -
I agree, it acting in accordance to the RFC - any critical extensions it does not understand, it rejects.
Seems to me that name constraint handling marked as critical would be nice to have...
DC
On 6/7/06, Patrick Patterson <[EMAIL PROTECTED]> wrote:
Hi Diarmuid:On Wednesday
>From everything I've heard and read, mod-proxy will not proxy HTTPS on
the back like what you are asking. You can have HTTPS on the
front end but not on the back. It will have to be HTTP to the
back.
If you get this working I would LOVE to hear how you got it done
On 6/6/06, Paul D. Robert