One problem is almost solved!
Two issuer dn are similar but not the same, there is a capital letter in
the first dn and a normal letter in the other ...
But something with the authentication is wrong/missing ...
It complains about a refused renegotiation from the client side.
I'm confused, I don't
On Mon, Mar 4, 2013 at 10:42 AM, Igor Cicimov wrote:
> What I was trying to point to is this:
>
> # openssl x509 -noout -in
> /etc/ssl/certs/TWCA_Root_Certification_Authority.pem -text
> Certificate:
> Data:
> Version: 3 (0x2)
> Serial Number: 1 (0x1)
> Signature Algorithm
What I was trying to point to is this:
# openssl x509 -noout -in
/etc/ssl/certs/TWCA_Root_Certification_Authority.pem -text
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1 (0x1)
Signature Algorithm: sha1WithRSAEncryption
*Issuer: C=TW, O=TAIWAN-CA, OU=Root CA,
The issuer dn is the same; the pem file is a ca bundle.
On Sun, Mar 3, 2013 at 11:23 PM, Igor Cicimov wrote:
>
> On 04/03/2013 7:33 AM, "Michele Mase'" wrote:
> >
> > Anyone?
> >
> >
> > On Fri, Mar 1, 2013 at 7:39 PM, Michele Mase'
> wrote:
> >>
> >> I'm testing a client authentication using
On 04/03/2013 7:33 AM, "Michele Mase'" wrote:
>
> Anyone?
>
>
> On Fri, Mar 1, 2013 at 7:39 PM, Michele Mase'
wrote:
>>
>> I'm testing a client authentication using:
>>
>> SSLCACertificateFile /path/to/pemfile.pem
>>
>> SSLVerifyClient require
>> SSLVerifyDepth 2
>> SSLOp
Anyone?
On Fri, Mar 1, 2013 at 7:39 PM, Michele Mase' wrote:
> I'm testing a client authentication using:
>
> SSLCACertificateFile /path/to/pemfile.pem
>
> SSLVerifyClient require
> SSLVerifyDepth 2
> SSLOptions +StdEnvVars +ExportCertData
> SSLRequire %{SSL_CLI