Re: Client basic authorisation

1999-03-08 Thread Steffen Dettmer
I can't understand what I should put into my /etc/httpd/passwd and /etc/httpd/group, and how I can get the `one line' version of the client's X.509 certificate. Why do you dislike the mod_ssl User Manual ? ;-) Yeah, you should take a look - the manual is just great! This topic is

Issuing Client Certificates

1999-03-08 Thread Nuno Miguel da Cruz Neves
Hi. I'm running Apache 1.3.4, mod-ssl 2.2.3 and SSLeay 0.9.0b. I've already set up the browser with SSL, and even some more stuff, and all works fine. The question is when I issue a client certificate. I've already read the ns-ca.doc and followed the instructions of F. Hirsch about the script

Re: Issuing Client Certificates

1999-03-08 Thread Ralf S. Engelschall
On Sun, Mar 07, 1999, Nuno Miguel da Cruz Neves wrote: I'm running Apache 1.3.4, mod-ssl 2.2.3 and SSLeay 0.9.0b. I've already set up the browser with SSL, and even some more stuff, and all works fine. The question is when I issue a client certificate. I've already read the ns-ca.doc and

6. Try out Apache with SSL (HTTP and HTTPS possible):

1999-03-08 Thread Gilles L. Chong Hok Yuen
Hi, first of all thanks for the tip Ralf on the setenv for the installation process. Ok, im on step 6. I made the certificate ("make certificate"), where u have to type in country name, organisation name, etc. The ssl.crt, ssl.csr, ssl.key dirs are created in the apache_1.3.4/conf dir. The

Re: 6. Try out Apache with SSL (HTTP and HTTPS possible):

1999-03-08 Thread Ralf S. Engelschall
On Mon, Mar 08, 1999, Gilles L. Chong Hok Yuen wrote: first of all thanks for the tip Ralf on the setenv for the installation process. Ok, im on step 6. I made the certificate ("make certificate"), where u have to type in country name, organisation name, etc. The ssl.crt, ssl.csr, ssl.key

TLS certificate request in MOD-SSL

1999-03-08 Thread Marc Jadoul
Hi, Is mod-ssl able to do client authentication and require that the client has a certificate signed by a specific subordinate CA ? Of course it can be done if you combine SSLCACertificatePath with SSLRequire. But, in TLS specification, when the server request the client certificate, it is

Re: TLS certificate request in MOD-SSL

1999-03-08 Thread Ralf S. Engelschall
On Mon, Mar 08, 1999, Marc Jadoul wrote: Is mod-ssl able to do client authentication and require that the client has a certificate signed by a specific subordinate CA ? Of course it can be done if you combine SSLCACertificatePath with SSLRequire. But, in TLS specification, when the