Hi!

I want to do this: check if the client sends me a certificate which my
self-signed CA has signed or if the client is inside the same network or if
the client enters a username+password.

However, with this, I can't have my browser(s) prompting me for a
certificate.. it just seems that that part is ignored...

Any suggestions?

PS - i've seen already the ssl_howto page (in fact this is a bit based from
there)

Thanks in advance for any help!

Ricardo

<VirtualHost 10.254.0.54:443>
        ServerName              intra54.dei.uc.pt
        DocumentRoot            /var/www/intra54/html
        ServerAdmin             [EMAIL PROTECTED]
        SSLEngine               on
        SSLCertificateFile      /var/www/intra54/ssl/intra54.crt
        SSLCertificateKeyFile   /var/www/intra54/ssl/intra54.key
        SSLCACertificateFile    /etc/pki/SSC_CA/ssc_ca.crt

        <Directory /var/www/intra54/html>
                Order                   deny,allow
                Deny                    from all
                Allow                   from 10.254.0.0/24

                AuthType                basic
                AuthName                "Area intra54.dei.uc.pt"
                AuthUserFile            /var/www/intra54/passwd/passwd
                Require                 valid-user

                Satisfy                 any

                SSLVerifyClient         optional
                SSLVerifyDepth          1
                SSLOptions              -StrictRequire

#               SSLRequireSSL
        </Directory>
</VirtualHost>

Reply via email to