Re: Two-way authentication

2001-02-28 Thread Mads Toftum
On Wed, Feb 28, 2001 at 11:03:47AM +0100, John Espen Hetty wrote: > > Yes. But unfortunatly, we are using Oracle IAS (With Portal). They > have bundled a modified version of mod_ssl (without the source), and we > can't replace it since doing so would mean that we'd loose the support. But >

RE: Two-way authentication

2001-02-28 Thread John Espen Hetty
>> Regarding our trouble with two-way authentication; is seems that the server >> sometimes freezes, or that it sometimes insists on asking for the user >> sertificate (re-negotiation) on every request. There are some keep-alive >> pr

Re: Two-way authentication

2001-02-28 Thread Mads Toftum
On Wed, Feb 28, 2001 at 10:17:59AM +0100, John Espen Hetty wrote: > Just wanted to know if anyone else was using this option. Check the list archive - quite a few people are using that feature. I had some three or four thousand users (previous job). > Regarding our trouble with t

RE: Two-way authentication

2001-02-28 Thread John Espen Hetty
Just wanted to know if anyone else was using this option. Regarding our trouble with two-way authentication; is seems that the server sometimes freezes, or that it sometimes insists on asking for the user sertificate (re-negotiation) on every request. There are some keep-alive problems as well. I

Re: Two-way authentication

2001-02-28 Thread Mads Toftum
On Wed, Feb 28, 2001 at 09:41:00AM +0100, John Espen Hetty wrote: > > Anyone using it ? ('SSLVerifyClient require') Yes. > Seems the implementation isn't all that good. The same for CRL handling. What are you talking about - except having to restart Apache when loading new CRL's, I've had no p

Two-way authentication

2001-02-28 Thread John Espen Hetty
Anyone using it ? ('SSLVerifyClient require') Seems the implementation isn't all that good. The same for CRL handling. It's too bad though. Hate to dish out a million bucks for something commercial that'l do the job. -Jon __

Single SSL port for both one-way and two-way Authentication

2001-01-27 Thread Mode Nalini
Hello,   Can a signle SSL port can be used for both one-way (for few clients)and two-way (for few clients)authentication by configuring in the following way?.Please clarify. SSLCipherSuite 'ALL:+3DES+MD5+RC4+RSA:-DH:-DES:+HIGH:-SSLv2:+SSLv3:+EXP' SSLCertificateFile $ORACLE_HOME/Apache/ocmcasrv/