Re: [us...@httpd] mod_ssl Client authentication question

2009-01-20 Thread Brian Mearns
On Tue, Jan 20, 2009 at 1:59 PM, Sean Conner wrote: > It was thus said that the Great Brian Mearns once stated: >> >> Thanks for the detailed response, Sean. I'm still not entirely clear >> on one thing, though: If I created my own certificate and gave the the >> organization name "Conman Laborato

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-20 Thread Sean Conner
It was thus said that the Great Brian Mearns once stated: > > Thanks for the detailed response, Sean. I'm still not entirely clear > on one thing, though: If I created my own certificate and gave the the > organization name "Conman Laboratories" and an Organzational unit name > of "Clients", would

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-20 Thread Brian Mearns
On Tue, Jan 20, 2009 at 2:30 AM, Sean Conner wrote: > It was thus said that the Great Brian Mearns once stated: >> I just want to double check some things because I implement ssl client >> auth on my server, to make sure I really understand what I'm doing: >> >> First, if I use SSLRequire to check

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-19 Thread Sean Conner
It was thus said that the Great Brian Mearns once stated: > I just want to double check some things because I implement ssl client > auth on my server, to make sure I really understand what I'm doing: > > First, if I use SSLRequire to check various fields in a client's > certificate, is it implied

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-16 Thread J. Greenlees
Brian Mearns wrote: > I just want to double check some things because I implement ssl client > auth on my server, to make sure I really understand what I'm doing: > > First, if I use SSLRequire to check various fields in a client's > certificate, is it implied that the certificate has already been

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-16 Thread Brian Mearns
On Fri, Jan 16, 2009 at 8:48 AM, Peter Schober wrote: > * Brian Mearns [2009-01-16 14:40]: >> First, if I use SSLRequire to check various fields in a client's >> certificate, is it implied that the certificate has already been >> verified as signed by one of the CA's I've defined in >> SSLCACerti

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-16 Thread Brian Mearns
On Fri, Jan 16, 2009 at 8:51 AM, Eric Covener wrote: >> Second, I was trying to test the above question by creating >> self-signed certs, adding them to my browser, and making sure the >> server would not authenticate them. But when I did, my browser >> (Firefox) didn't even provide them as an opt

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-16 Thread Eric Covener
> Second, I was trying to test the above question by creating > self-signed certs, adding them to my browser, and making sure the > server would not authenticate them. But when I did, my browser > (Firefox) didn't even provide them as an option for me to use. I know > this isn't strictly an apache

Re: [us...@httpd] mod_ssl Client authentication question

2009-01-16 Thread Peter Schober
* Brian Mearns [2009-01-16 14:40]: > First, if I use SSLRequire to check various fields in a client's > certificate, is it implied that the certificate has already been > verified as signed by one of the CA's I've defined in > SSLCACertificateFile, for instance? In other words, this isn't just > c

[us...@httpd] mod_ssl Client authentication question

2009-01-16 Thread Brian Mearns
I just want to double check some things because I implement ssl client auth on my server, to make sure I really understand what I'm doing: First, if I use SSLRequire to check various fields in a client's certificate, is it implied that the certificate has already been verified as signed by one of