Re: [users@httpd] Re: mod_ssl help

2013-03-04 Thread Michele Mase'
One problem is almost solved! Two issuer dn are similar but not the same, there is a capital letter in the first dn and a normal letter in the other ... But something with the authentication is wrong/missing ... It complains about a refused renegotiation from the client side. I'm confused, I don't

Re: [users@httpd] Re: mod_ssl help

2013-03-03 Thread Igor Cicimov
On Mon, Mar 4, 2013 at 10:42 AM, Igor Cicimov wrote: > What I was trying to point to is this: > > # openssl x509 -noout -in > /etc/ssl/certs/TWCA_Root_Certification_Authority.pem -text > Certificate: > Data: > Version: 3 (0x2) > Serial Number: 1 (0x1) > Signature Algorithm

Re: [users@httpd] Re: mod_ssl help

2013-03-03 Thread Igor Cicimov
What I was trying to point to is this: # openssl x509 -noout -in /etc/ssl/certs/TWCA_Root_Certification_Authority.pem -text Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha1WithRSAEncryption *Issuer: C=TW, O=TAIWAN-CA, OU=Root CA,

Re: [users@httpd] Re: mod_ssl help

2013-03-03 Thread Michele Mase'
The issuer dn is the same; the pem file is a ca bundle. On Sun, Mar 3, 2013 at 11:23 PM, Igor Cicimov wrote: > > On 04/03/2013 7:33 AM, "Michele Mase'" wrote: > > > > Anyone? > > > > > > On Fri, Mar 1, 2013 at 7:39 PM, Michele Mase' > wrote: > >> > >> I'm testing a client authentication using

Re: [users@httpd] Re: mod_ssl help

2013-03-03 Thread Igor Cicimov
On 04/03/2013 7:33 AM, "Michele Mase'" wrote: > > Anyone? > > > On Fri, Mar 1, 2013 at 7:39 PM, Michele Mase' wrote: >> >> I'm testing a client authentication using: >> >> SSLCACertificateFile /path/to/pemfile.pem >> >> SSLVerifyClient require >> SSLVerifyDepth 2 >> SSLOp

[users@httpd] Re: mod_ssl help

2013-03-03 Thread Michele Mase'
Anyone? On Fri, Mar 1, 2013 at 7:39 PM, Michele Mase' wrote: > I'm testing a client authentication using: > > SSLCACertificateFile /path/to/pemfile.pem > > SSLVerifyClient require > SSLVerifyDepth 2 > SSLOptions +StdEnvVars +ExportCertData > SSLRequire %{SSL_CLI