Re: [users@httpd] MIL CAC and mod_ssl for httpd 2.4.6

2017-05-05 Thread Doug Maurer
Just tried and still get the error (20). On 5/5/2017 8:02 AM, rwebb wrote: ​Have you tried setting the verify depth to 2? That way you hit the intermediate and root CA certs in the chain. On Fri, 05/05/2017 01.58, Doug Maurer wrote: We have a setup where we have to

Re: [users@httpd] MIL CAC and mod_ssl for httpd 2.4.6

2017-05-05 Thread rwebb
​Have you tried setting the verify depth to 2? That way you hit the intermediate and root CA certs in the chain. On Fri, 05/05/2017 01.58, Doug Maurer wrote: > We have a setup where we have to use MIL CAC's to access our site. It > currently works with SSLVerifyClient require

[users@httpd] MIL CAC and mod_ssl for httpd 2.4.6

2017-05-04 Thread Doug Maurer
We have a setup where we have to use MIL CAC's to access our site. It currently works with SSLVerifyClient require and SSLVerifyDepth 10, but we want to limit what the users see to just of the certs that is presented. We tried changing the VerifyDepth to 1 and removed all the non-email certs in