Re: [EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-29 Thread Kenneth Svee
[ Bill Tangren ] Serge Dubrouski wrote: Your client submits certificate signed by CA which certificate you don't have in your SSLCACertificatePath. Actually it looks like you incorrectly configured it. You have: SSLCACertificateFile /etc/httpd/conf/ssl.crt/root.crt SSLCACertificatePath

[EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Bill Tangren
I posted this on the Redhat Enterprise Linux 4 (Nahant) list, but I didn't get sufficient help to solve my problem, so I'm trying here. I apologize in advance if any of you have seen this before. I am having a problem with client authentication with apache and openssl. I have been ordered

Re: [EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Serge Dubrouski
Your client submits certificate signed by CA which certificate you don't have in your SSLCACertificatePath. Actually it looks like you incorrectly configured it. You have: SSLCACertificateFile /etc/httpd/conf/ssl.crt/root.crt SSLCACertificatePath /etc/httpd/conf/ssl.crt You should use just one

Re: [EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Bill Tangren
Serge Dubrouski wrote: Your client submits certificate signed by CA which certificate you don't have in your SSLCACertificatePath. Actually it looks like you incorrectly configured it. You have: SSLCACertificateFile /etc/httpd/conf/ssl.crt/root.crt SSLCACertificatePath /etc/httpd/conf/ssl.crt

Re: [EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Serge Dubrouski
So you have a bunch of .cer files. Then you have to use SSLCACertificatePath and links with hashes as names. It can't be just one file with once certificate unless all your client have certificates signed by one CA. On 11/28/06, Bill Tangren [EMAIL PROTECTED] wrote: Serge Dubrouski wrote: Your

Re: [EMAIL PROTECTED] apache client authentication problem (somewhat long)

2006-11-28 Thread Serge Dubrouski
On 11/28/06, Bill Tangren [EMAIL PROTECTED] wrote: Serge Dubrouski wrote: Your client submits certificate signed by CA which certificate you don't have in your SSLCACertificatePath. Actually it looks like you incorrectly configured it. You have: SSLCACertificateFile