Re: [users@httpd] Re: Client certificate authentication issues

2012-10-16 Thread VP
Thank you Toomas. I will also try these settings and see what I get. I am currently running OpenSSL 1.0.0 version with Apache 2.2.15. Regards, VP On Tue, Oct 16, 2012 at 3:58 PM, Toomas Aas wrote: > I have had my share of trouble with client certificate authentication / SSL > renegotiation. It i

Re: [users@httpd] Re: Client certificate authentication issues

2012-10-16 Thread Toomas Aas
I have had my share of trouble with client certificate authentication / SSL renegotiation. It is difficult to troubleshoot. In addition to what Mark already suggested, here are some other things that may help: 1. Try to reduce the possible amount of SSL protocols and ciphers that client and

Re: [users@httpd] Re: Client certificate authentication issues

2012-10-15 Thread Mark Montague
On October 15, 2012 6:11 , VP wrote: I am still continuing my search to find other solutions to fix my issue. I have a question. Lets say even if my SSLVerifyClient in is Location block called "secure". Would the SSL Renegotiation still trigger if the user types in direct URL the very first time

Re: [users@httpd] Re: Client certificate authentication issues

2012-10-15 Thread VP
Hi Mark, I am still continuing my search to find other solutions to fix my issue. I have a question. Lets say even if my SSLVerifyClient in is Location block called "secure". Would the SSL Renegotiation still trigger if the user types in direct URL the very first time? Like calling: https://www.s

Re: [users@httpd] Re: Client certificate authentication issues

2012-10-09 Thread VP
Dear Mark, Thank you so much for your email. Yes, I have 'SSLVerifyClient require' set in 'Location' block. I also believe this is the root cause of the problem but this occurs only for few IE clients and not all. I also noticed that it happens for few users who use Windows 7. Perhaps, there is s

Re: [users@httpd] Re: Client certificate authentication issues

2012-10-09 Thread Mark Montague
On October 9, 2012 7:18 , VP wrote: We have noticed that for few users, client certificate authentication fails – i.e. browser prompts for client certificate in a popup window and after I choose the appropriate personal certificate and submit, it then immediately shows me IE’s “Page cannot be fo

[users@httpd] Re: Client certificate authentication issues

2012-10-09 Thread VP
Any pointers or help please? On Tue, Oct 9, 2012 at 11:38 AM, VP wrote: > Dear All, > > I have been facing this particular issue for quite sometime now and > don’t know what exactly is causing this. The issue is with client > certificate authentication. We have noticed that for few users, client