Re: [users@httpd] Client Auth Retries

2015-06-04 Thread McGregor, Donald (Don) (CIV)
Jun 2, 2015, at 3:18 PM, McGregor, Donald (Don) (CIV) mailto:mcgr...@nps.edu>> wrote: I’m trying to set up client authentication using smart cards and be reasonably polite about auth failures. A typical failure mode is that the user doesn’t have the card inserted; I should send them to a warn

Re: [users@httpd] Client Auth Retries

2015-06-03 Thread McGregor, Donald (Don) (CIV)
client browser (Chrome) The only way to force it to use the smart card auth appears to be quitting and restarting the browser. On Jun 2, 2015, at 3:18 PM, McGregor, Donald (Don) (CIV) mailto:mcgr...@nps.edu>> wrote: I’m trying to set up client authentication using smart cards and be reas

[users@httpd] Client Auth Retries

2015-06-02 Thread McGregor, Donald (Don) (CIV)
I’m trying to set up client authentication using smart cards and be reasonably polite about auth failures. A typical failure mode is that the user doesn’t have the card inserted; I should send them to a warning page, then let them retry. The relevant config file for the top level: SSLVerifyCli

[users@httpd] CAC Card Client Certificate Auth and Crypto Suites

2015-03-23 Thread McGregor, Donald (Don) (CIV)
I’m attempting to get smart cards (DoD CAC) working with apache 2.2 (CentOS 6). It works on some browsers—Chrome, Safari—but not Firefox 36.0.3 and IE 11.0.9600.1760 on Windows 8.1. Firefox doesn’t work on OS X, either. The root cause of the problem seems to be the SSL negotiation. The SSLProto

[users] Re: [users@httpd] CAC Card Authentication

2014-06-01 Thread McGregor, Donald (Don) (CIV)
On Jun 1, 2014, at 6:18 AM, Steven Siebert mailto:smsi...@gmail.com>> wrote: On Fri, May 30, 2014 at 12:00 AM, McGregor, Donald (Don) (CIV) mailto:mcgr...@nps.edu>> wrote: ERR_SSL_P Can you provide the (sanitized) apache error_log when you try mutual auth? S Using IE client on

Re: [users@httpd] CAC Card Authentication

2014-05-31 Thread McGregor, Donald (Don) (CIV)
What’s the incantation for doing debugging on the client certs from a smart card in curl? The google hits seem to be outdated. On May 29, 2014, at 11:06 PM, Jason Pyeron mailto:jpye...@pdinc.us>> wrote: -Original Message- From: McGregor, Donald (Don) (CIV) Sent: Friday, May 30,

[users@httpd] CAC Card Authentication

2014-05-29 Thread McGregor, Donald (Don) (CIV)
I'm attempting to get CAC card authentication working with Apache httpd-2.2.3-85 on Centos 5. CAC cards are the DoD variant of smart cards. The SSL connection is failing (Chrome error: ERR_SSL_PROTOCOL_ERROR) and I'm having problems diagnosing exactly where the problem is. The objective is to c