Re: SA-09-15 vs Apache with client certificates

2009-12-07 Thread Toomas Aas
Toomas Aas wrote: Do I understand the "NOTE WELL" section of FreeBSD-SA-09:15 correctly that if I apply the patch then this functionality will no longer work? Testing confims that my understanding is correct. I applied the patch and authentication results in "ssl_error_handshake_failure_a

SA-09-15 vs Apache with client certificates

2009-12-03 Thread Toomas Aas
Hello! We have Apache running on FreeBSD 7.2, where among others a SSL virtual host is defined. One particular subdirectory of this virtual host is configured to require client certificates, using .htaccess file: SSLVerifyClient Require SSLVeri