Hi,

As long as you're still in the SSL handshake phase (checking the client certs etc), 
you're not able to redirect the client to an error page.  In this phase you're not 
talking HTTP yet.

The only way I know to solve this is to allow  all  clients to pass  (by setting 
SSLClientVerifiy to optional) and passing the result to your webapp (by setting 
SSLOptions +StdEnvVars) . Than the webapp can decide whether to allow the client in or 
redirect it to a specific  error page.

Hope this helps,

Danny
>Hello all,
>
>Is it possible to redirect user with bad cert to other page?
>As I understand, server doesn't return any error code after ssl error on
>expired cert. Therefore, ErrorDocument directive doesn,t work.
>
>Thank You
>Oleg Lebedev
>
>
>______________________________________________________________________
>Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
>User Support Mailing List                      [EMAIL PROTECTED]
>Automated List Manager                            [EMAIL PROTECTED]

Reply via email to