Two-way authentication

2001-02-28 Thread John Espen Hetty
Anyone using it ? ('SSLVerifyClient require') Seems the implementation isn't all that good. The same for CRL handling. It's too bad though. Hate to dish out a million bucks for something commercial that'l do the job. -Jon

RE: Two-way authentication

2001-02-28 Thread John Espen Hetty
. -Original Message- From: Mads Toftum [SMTP:[EMAIL PROTECTED]] Sent: 28. februar 2001 09:58 To: [EMAIL PROTECTED] Subject: Re: Two-way authentication On Wed, Feb 28, 2001 at 09:41:00AM +0100, John Espen Hetty wrote: Anyone using it ? ('SSLVerifyClient require') Yes

RE: Two-way authentication

2001-02-28 Thread John Espen Hetty
Regarding our trouble with two-way authentication; is seems that the server sometimes freezes, or that it sometimes insists on asking for the user sertificate (re-negotiation) on every request. There are some keep-alive problems as well. I really haven't

SSL enviroment variables available ?

2001-02-23 Thread John Espen Hetty
BEFORE YOU POST, search the faq at http://java.apache.org/faq/ WHEN YOU POST, include all relevant version numbers, log files, and configuration files. Don't make us guess your problem!!!

Problem verifying CRL's

2001-02-23 Thread John Espen Hetty
Hi, I have got a CRL and a CA certificate from an external CA (poth PEM). Trying to use this CRL results in lots of 'Invalid signature on CRL' messages in the log. Trying 'openssl crl -in my.crl -CAfile -my.crt' results in a 'verify failure'. Both the CRL and the certificate seems fine