----- Original Message -----
From: "Sonu Kishore" <[EMAIL PROTECTED]>
>
> it is possible that user "A" logs on to my web site with his user id/
password
> but uses user "B" certificate... in such a case non-repudiation becomes
> ill-logical.
======================
Try to use mod_authz_ldap http://authzldap.othello.ch/

it establish relations between certificates and passwords. So user with a
right certificate has to know the right password.


I tried to compile that module but I had problems at patching
ssl_engine_kernel.c Had some one more success?
======================


Best regards,
Ales Keber
[EMAIL PROTECTED]



______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to