Re: [users@httpd] Client SSL and CRL Question

2013-06-04 Thread Jean-Francois Maeyhieux
That's an old apache bug about revoked certificate log that expose the code that log this: https://issues.apache.org/bugzilla/show_bug.cgi?id=52162 Regards, Jean-François Le mardi 04 juin 2013 à 15:33 -0400, Jamie Johnson a écrit : > I am trying to find out what happens when a client

Re: [users@httpd] SSL authentication by clients certificates or by IP

2013-03-14 Thread Jean-Francois Maeyhieux
On Thu, 2013-03-14 at 14:33 +0100, Jan Vávra wrote: > Hello, > for a) I'd use directives Order, Allow, Deny for Directory > for b) I'd use > SSLVerifyClient require > This options allows only such clients with client certificate iisued > in the list defined by SSLCACertificateFile > I just n

Re: [users@httpd] SSL authentication by clients certificates or by IP

2013-03-14 Thread Jean-Francois Maeyhieux
Satisfy Any" directive. > http://httpd.apache.org/docs/2.2/mod/core.html#satisfy > > > - Y > > On Thursday, March 14, 2013, Jean-Francois Maeyhieux wrote: > Hello everyone ! > > >My purpose is simple: > >

[users@httpd] SSL authentication by clients certificates or by IP

2013-03-14 Thread Jean-Francois Maeyhieux
Hello everyone ! My purpose is simple: I want a unique SSL vhost that permit two way to access the website: a) People from specific IP could access the content b) People with a valid client certificate could access the content I know how to achieve each access way but not both in the same t