On Fri, Jan 28, 2005 at 05:22:28PM +0000, Joe Orton wrote: > On Fri, Jan 28, 2005 at 06:03:14PM +0100, Dominique Quatravaux wrote: > > Geoffrey Young wrote: > > > > | > > | so, are you saying that can remove SSLVerifyClient here and all is > > | ok? > > > > No no, you're right and Joe was wrong, you must not change a thing. > > Sorry for being unclear! > > I think you're confused about the difference between SSLVerifyClient > "optional" and "require"
...he says... > : both insist on a new handshake, both send the > client a CertificateRequest message, but the former will fail the SSL > handshake if no cert is presented; the latter will not. ...and then explains it backwards - exchange "former" and "latter" in that sentence...
