Re: SSLVerifyClient applies to parent directory

2008-06-27 Thread Florian Hackenberger
On Thursday 26 June 2008, Florian Hackenberger wrote: On Thursday 26 June 2008, Joe Orton wrote: It denies access for what type of request, a directory listing? Ok, I think I understood the intention of your question. Accessing a specific file works, but getting the directory listing fails.

Re: SSLVerifyClient applies to parent directory

2008-06-27 Thread Cuesta Gilles
Florian Hackenberger a écrit : On Thursday 26 June 2008, Florian Hackenberger wrote: On Thursday 26 June 2008, Joe Orton wrote: It denies access for what type of request, a directory listing? Ok, I think I understood the intention of your question. Accessing a specific file works, but

Re: SSLVerifyClient applies to parent directory

2008-06-27 Thread Florian Hackenberger
On Friday 27 June 2008, Cuesta Gilles wrote: It's more an apache specific question; try setting Options +Indexes in your vhost, allowing directory listing. Thanks, but that is certainly not the problem, as apache creates a listing as soon as I remove 'SSLVerifyClient require'. Cheers,

Re: SSLVerifyClient applies to parent directory

2008-06-27 Thread Cuesta Gilles
Florian Hackenberger a écrit : On Friday 27 June 2008, Cuesta Gilles wrote: It's more an apache specific question; try setting Options +Indexes in your vhost, allowing directory listing. Thanks, but that is certainly not the problem, as apache creates a listing as soon as I remove

Re: SSLVerifyClient applies to parent directory

2008-06-27 Thread Florian Hackenberger
On Friday 27 June 2008, Cuesta Gilles wrote: For your issue, two questions: - is a VerifyDepth 1 enough for verification chaining ? It is, however that is not relevant for the problem, because apache should not request a client certificate in the first place. - No default VerifyClient by

Re: SSLVerifyClient applies to parent directory

2008-06-27 Thread Joe Orton
On Fri, Jun 27, 2008 at 08:40:43AM +0200, Florian Hackenberger wrote: On Thursday 26 June 2008, Florian Hackenberger wrote: On Thursday 26 June 2008, Joe Orton wrote: It denies access for what type of request, a directory listing? Ok, I think I understood the intention of your question.

Re: SSLVerifyClient applies to parent directory

2008-06-27 Thread Florian Hackenberger
On Friday 27 June 2008, Joe Orton wrote: Yup. Changing the SSLVerifyClient require to: SSLVerifyClient optional SSLRequire %{SSL_CLIENT_VERIFY} eq SUCCESS Thanks a lot! The workaround worked ;-). Please consider this issue solved. I have another question: Has anyone successfully established

Re: SSLVerifyClient applies to parent directory

2008-06-27 Thread Florian Hackenberger
On Friday 27 June 2008, Florian Hackenberger wrote: I have another question: Has anyone successfully established a connection to an apache/mod_ssl server with client authentication using a java client? My client (code below) generates the following log (exception at the end) upon execution:

SSLVerifyClient applies to parent directory

2008-06-26 Thread Florian Hackenberger
Hi! First of all: Thanks for your great software, I've used it on several server and it proved to be very useful. I have a little problem with the SSLVerifyClient directive on apache 2.2.9 with mod_ssl compiled from source on debian etch. I have the following directory layout:

Re: SSLVerifyClient applies to parent directory

2008-06-26 Thread Cuesta Gilles
Florian Hackenberger a écrit : Hi! First of all: Thanks for your great software, I've used it on several server and it proved to be very useful. I have a little problem with the SSLVerifyClient directive on apache 2.2.9 with mod_ssl compiled from source on debian etch. I have the following

Re: SSLVerifyClient applies to parent directory

2008-06-26 Thread Florian Hackenberger
On Thursday 26 June 2008, Cuesta Gilles wrote: Maybe try this: Listen 443 VirtualHost *:443 SSLEngine On SSLCertificateFile /etc/apache2/ssl/acoveo.com.pem DocumentRoot /usr/local/htdocs Location /directory/subdirectory SSLVerifyClient require

Re: SSLVerifyClient applies to parent directory

2008-06-26 Thread Joe Orton
On Thu, Jun 26, 2008 at 05:55:45PM +0200, Florian Hackenberger wrote: Directory /usr/local/htdocs/directory/subdirectory SSLVerifyClient require SSLVerifyDepth 1 /Directory The problem is that apache denies access to: https//MYSERVER/directory It denies access for what

Re: SSLVerifyClient applies to parent directory

2008-06-26 Thread Florian Hackenberger
On Thursday 26 June 2008, Joe Orton wrote: It denies access for what type of request, a directory listing? Yes -- DI Florian Hackenberger [EMAIL PROTECTED] www.hackenberger.at __ Apache Interface to OpenSSL (mod_ssl)

Re: SSLVerifyClient applies to parent directory

2008-06-26 Thread Gilles Cuesta (Gmail)
Florian Hackenberger a écrit : On Thursday 26 June 2008, Cuesta Gilles wrote: Maybe try this: Listen 443 VirtualHost *:443 SSLEngine On SSLCertificateFile /etc/apache2/ssl/acoveo.com.pem DocumentRoot /usr/local/htdocs Location /directory/subdirectory