Another variation of the "put images under http" proposal.
Just puzt them into a separate directory that don't have
client certs presentation as requirement. Thus you don't
end up with possible "broken keys" (indicating no security)
or with undisplayed images ('cause they are unsecured).
Regarding the actual problem, don't know. Perhaps something
is wrong with the session cache.
Ralf, is there an easy way to display (or to dump) the actual
content of the session cache for debugging purposes? (Perhaps
even a feature to dump and reload like bind does with
zone files...)
[EMAIL PROTECTED] schrieb:
>
> Hi
> I have asked this questions some days ago, but didn't receive any answer,
> so I'll try again:
>
> When I use Client Authentication with mod_ssl and use Netscape with
> multiple different Client Certificates, I obviously set "Ask every time" in
> the browser for my preferred certificate.
>
> What happens then is that Netscape asks me several times for ONE
> PAGE to choose my certificate. It seems to me this is due to inline
> images on the page, which are requested by the browser simultaneously.
>
> It is a very annoying behaviour which makes the "Ask every time" option
> practically unusable and it has to be said that Stronghold SSL Proxy
> at least does not act like that (it asks for the client certificate once for
> each virtual host).
>
> I would be very glad to hear anything about possible solutions and am
> very willing to help in any way I can.
>
> Im running the following software:
> Apache 1.3.6, statically linked to mod_ssl 2.3.2 and openssl 0.9.3a on
> Sun Solaris 2.51 and 2.6 (compiled with gcc 2.7.2.3)
>
> Bye
> Tim
>
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
--
Holger Reif Tel.: +49 361 74707-0
SmartRing GmbH Fax.: +49 361 7470720
Europaplatz 5 [EMAIL PROTECTED]
D-99091 Erfurt WWW.SmartRing.de
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
