Re: SSLVerifyClient applies to parent directory

[Cuesta Gilles]

Florian Hackenberger a écrit :

On Friday 27 June 2008, Cuesta Gilles wrote:

It's more an apache specific question; try setting
Options +Indexes
in your vhost, allowing directory listing.

Thanks, but that is certainly not the problem, as apache creates a listing as soon as I remove 'SSLVerifyClient require'.

Cheers,
        Florian

That seems to point that it's already activated.

For your issue, two questions:
- is a VerifyDepth 1 enough for verification chaining ?
- No default VerifyClient by default for VirtualHost
Try adding:

SSLVerifyClient none


<Directory /usr/local/htdocs>
        SSLVerifyClient none
</Directory>

Listen 443
<VirtualHost *:443>
       SSLEngine On
       SSLCertificateFile /etc/apache2/ssl/acoveo.com.pem
       DocumentRoot "/usr/local/htdocs"

        SSLVerifyClient none

        <Directory /usr/local/htdocs/directory/subdirectory>
        SSLVerifyClient require
                SSLVerifyDepth 1
        </Directory>
</VirtualHost>

--
Chuck Norris comprend Lassie et Flipper le dauphin. C'est d'ailleurs lui qui à 
réalisé les traductions dans l'intégralité des épisodes !
Gilles CUESTA - Logiciels Libres
69139920

or

signature.asc
Description: OpenPGP digital signature