[us...@httpd] What is better? Apache OR Tomcat client cert validation?

Hi, I need to validate client cert against some rules, but I don´t know what is the best approach. To validade client cert on Apache or on Tomcat? Thanks, Andre -- View this message in context:

[us...@httpd] How to validate the subjectAltName?

Hi, I need to grant access only to some clients that have a specific info in the subjectAltName. I know how to check the name inside the client cert: e.g. SSLRequire ( %{SSL_CLIENT_S_DN_CN} eq John Smith ) How to do the same in the subjectAltName? Thanks, Andre -- View this message in

[us...@httpd] ssl_error_handshake_failure_alert - client error page

Hi, I´ve setup a virtualhost that requires client certificate, and it works fine. But, if the client doesn´t have the cert, or the cert doesn´t match the conditions I´ve specified, the client browser returns a page with the ssl_error_handshake_failure_alert error. I would like to return a