The only way is upgrading to 2.2.3. It's a well known bug in 2.0.XX
that was fixed in 2.2.X

On 10/12/06, masro <[EMAIL PROTECTED]> wrote:
Hi List,

i do an update from Apache 2.0.54 to 2.0.59, now i've the following problem:

The following VHOST configuration dosent work, when i use POST requests
within the secured directory

<VirtualHost *:443>
       ServerName xgames.org
       DocumentRoot "/htdocs/"
       SSLEngine On
       SSLCertificateFile conf/cert/server.crt
       SSLCertificateKeyFile conf/cert/server.key
       SSLCACertificateFile conf/cert/ca-bundle.cer
       SSLVerifyDepth 3
       SSLOptions +StdEnvVars +OptRenegotiate +ExportCertData
       SSLVerifyClient optional
       <Directory /htdocs/secure>
               SSLVerifyClient require
       </Directory>
</VirtualHost>

Got errors like:
[Thu Oct 12 11:09:32 2006] [error] SSL Re-negotiation in conjunction
with POST method not supported! hint: try SSLOptions +OptRenegotiate

When i use the following configuration it work's. I've to use
"SSLVerifyClient none" instead of "SSLVerifyClient optional", may it be
a bug or a feature, possibly im only to stupid, please tell me if i'm a
dump fool ;-)

<VirtualHost *:443>
       ServerName xgames.org
       DocumentRoot "/htdocs/"
       SSLEngine On
       SSLCertificateFile conf/cert/server.crt
       SSLCertificateKeyFile conf/cert/server.key
       SSLCACertificateFile conf/cert/ca-bundle.cer
       SSLVerifyDepth 3
       SSLOptions +StdEnvVars +OptRenegotiate +ExportCertData
       SSLVerifyClient none
       <Directory /htdocs/secure>
               SSLVerifyClient require
       </Directory>
</VirtualHost>

Why i can't use "SSLVerifyClient optional" ?

regards
Christian Gottschalch



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
  "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to