I tried : <Directory /home/giacob/src/work_ocsp/apache/htdocs/secure_area> SSLVerifyClient require SSLVerifyDepth 10 SSLOptions +FakeBasicAuth +ExportCertData +CompatEnvVars SSLRequire %{SSL_CLIENT_S_DN_Email} eq "e-mail on cert" SSLRequireSSL </Directory> but it doesn't work, access is always denied (forbidden). Any idea ? Thanks, Andrea ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]