Hi,
We are using Apache httpd 2.2.3 on Red hat linux and have a problem with our
client certificates.

In the ssl.conf file we have a configured a Virtual Host that listens to
port 444 that requires the client to verify a certificate.

<VirtualHost *:444>
<Location /servlets/*>
        SSLVerifyClient require
        SSLVerifyDepth 1
        SSLCACertificateFile /etc/pki/tls/certs/xxxxx_users.cer
</Location>

This works out fine, the client certificate can be choosen in the browser
and I can fill in the password and click "ok".
But the certificate is not validated correctly and the ssl_error log says:

[Tue Apr 08 15:25:23 2008] [error] Re-negotiation handshake failed: Not
accepted by client!?

What am I missing? I got this working in Tomcat using the exact same
certificate. Is there a way to keep the client certificate
handling in Tomcat.

Regards
/Christopher

Reply via email to