Hi I'm doing a set up with client side certificates. My application
knows exactly what certificate to send so I want to avoid sending the
list of all the CA names. The list if CA names will include my client
names and I'd like to avoid that.

When I run openssl s_client -connect somehost against Apache web
server I get this as part of the output:
No client certificate CA names sent

When I run the same command against HAProxy

---
Acceptable client certificate CA names
/CN=Client1 Root CA/O=Client/OU=Client/ST=CA/L=San Francisco/C=US
/CN=Client2 Root CA/O=Client/OU=Client/ST=CA/L=San Francisco/C=US
/CN=Client3 Root CA/O=Client/OU=Client/ST=CA/L=San Francisco/C=US
---



Thanks

Reply via email to