Hi All,

We have setup SSL mutual authentication as per document and it is
working fine. But while checking packet flow using tcpdump, we found
server is requesting the client certificate twice. Is this normal ?.or
i am missing something. Because in RFC, it is mentioned only one
request.

Below is the SSL Configuration for SSL Client authentication:
SSLVerifyClient require
SSLVerifyDepth  2
SSLCACertificateFile "/usr/local/src/CA/ca.pem"

Apache Version:
We tried on both 2.4.3 and 2.2.24

OpenSSL:
OpenSSL 1.0.0

Browser:
IE - 8 & 9
Firefox - 19

Regards

Chima

Reply via email to