I am extremely happy now.
I have successfully implemented Apache 1.3.6 + SSL 0.9.3a.
I have user controlled access with passwords.
It has only taken about 1.5 weeks.
The last step is to create client certificates.
I only have about 20 people accessing the site.
I want to restrict access to only people with valid certificates.
I know you have to edit the http.conf file and add
SSLVerifyClient require
SSLVerifyDepth 1
SSLCACertificateFile conf/ssl.crt/ca.crt
I guess the question is how do I create, and manage the different
certificates. How is it associated with the ca.crt file.
As always, any help is appreciated.
geoff nordli
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]