[users@httpd] Log revoked certificate information

2019-05-28 Thread Du Hao
Hi, I'm looking for a way to track users who is using client certificate to log in to Apache HTTPD. Especially, I wanted to know who is trying to use revoked certificates to attempt login. Is there any possible way to log some of the certificate information, such as the certificate's serial number

Re: [users@httpd] Unexpected result of requesting client certificate when requesting locations with different SSLVerifyClient settings

2019-04-10 Thread Du Hao
Is Apache HTTP Server going to drop TLSv1.2 support in near future? If not, it is a bug that affects user who voluntarily choose to not use TLSv1.3. William A Rowe Jr 于 2019年4月11日周四 01:24写道: > On Wed, Apr 10, 2019 at 10:48 AM Du Hao wrote: > >> >> I suspect there is a bug i

[users@httpd] Unexpected result of requesting client certificate when requesting locations with different SSLVerifyClient settings

2019-04-10 Thread Du Hao
Hello, I ran into a problem when configuring different locations for Apache HTTP Server while utilizing client certificate. The client certificate is not stored permanently on the browser; It is expected that the client certificate will be inserted by encrypted USB stick before the user is clickin