You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Lee, Keane" <ke...@us.army.mil> on 2003/04/22 21:18:31 UTC

[users@httpd] smart card authentication to apache 2.0

  
I am trying to configure a smart card client authentication to the Apache 2.0 web server (running Linux RedHat 8.0). I am getting no response from the client side, even though I could ping the server. I tried connecting to the server both securely and unsecurely. No response. 

Server side
I stored the private key in the /etc/httpd/conf/ssl.key/ folder.
I stored the self signed server certificate in the /etc/httpd/conf/ssl.crt/ folder.
I stored the CA certificate for the smart card in the /etc/httpd/conf/ssl.crt/ folder.
I also modified the httpd.conf file as follows:

<VirtualHost 172.16.20.10:443>
ServerName RHAPACHE
ServerAlias client-auth
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
LogLevel debug
ErrorLog /etc/httpd/logs/client-auth_error_log
LogFormat combined
TransferLog /etc/httpd/logs/client-auth_access_log
SSLEngine on
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/private.key
SSLCertificateFile /etc/httpd/conf/ssl.crt/selfsigned.crt
SSLCACertificateFile /etc/httpd/conf/ssl.crt/smartcardCA.crt
SSLSessionCacheTimeout 3000
SSLVerifyClient require
SSLVerifyDepth 10
DocumentRoot /var/www/html
SSLOptions +ExportCertData +StdEnvVars
<Directory /var/www/html>
Options None
AllowOverride None
</Directory>
</VirtualHost>
I don't know what the problem is. I even tried accessing the secure page from the server side. I get an error -12227. Do you know what this error means? How would I fix this problem? Any help would be very much appreciated.

Thanks,
Keane