On Wed, Oct 29, 2003 at 05:15:13PM +0100, xavier jeannin wrote: > I have developped Web application, that uses X509 certificat. Netscape > ask at each time (page) the certificat. As my users have several > certificates they do not use the option "Select Automaticly" in > netscape, I have to say to my user to use now this option and create a > netscape's profile for every certificat. > > First, I have compile Apache with MM and use : > SSLSessionCache shm:/usr/local/apache/logs/ssl_gscache(2048000) > SSLSessionCacheTimeout 1800 > but it does not work. > "but it does not work" - how should that be understood? that SSLSessionCache does not work, or that the users are still being asked for the certificate? The simplest way to test sessions away from the browser is to use openssl s_client with the -reconnect option - that should tell you wether session caching is in effect or not. Usually when sessions are enabled in apache, but the browser keeps asking for the cert, then it is a setting in the browser - I seem to recall that Netscape had an option to ask for the password on every use.
vh Mads Toftum -- Speaking at ApacheCon 2003 - http://ApacheCon.com/ T03, "Apache 2 mod_ssl tutorial" (3h) WE03, "Troubleshooting Apache configurations" WE11, "Apache mod_rewrite, the Swiss Army Knife of URL manipulation" ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
