You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Krist van Besien <kr...@gmail.com> on 2009/06/16 12:57:43 UTC

Re: [users@httpd] SSLProxyEngine, no client certificate found

On Tue, Jun 16, 2009 at 8:49 AM, Nicolas Cros<ni...@gmail.com> wrote:

> The other one not :
>
> [debug] ssl_engine_kernel.c(1571): Proxy client certificate callback:
> (myproxy:443) no client certificate found!?
>
> I wonder myself how clients certificates are choosen ? Any thoughts ?

I'd suspect that the client certificate for the second host wasn't
found in /etc/httpd/conf/ssl/SSLproxy.pem

Krist




-- 
krist.vanbesien@gmail.com
krist@vanbesien.org
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] SSLProxyEngine, no client certificate found

Posted by Nicolas Cros <ni...@gmail.com>.
Krist,
thanks for your answer.

> I'd suspect that the client certificate for the second host wasn't
> found in /etc/httpd/conf/ssl/SSLproxy.pem

In fact, both remote sites trusts the same CA.

My comprehension is that the same client certicate can be used, but  
apache/mod_ssl (for an obscure reason) did not find any client  
certificate.
But i cannot figured how to "help" apache/mod_ssl  choosing the  
correct one.


> On Tue, Jun 16, 2009 at 8:49 AM, Nicolas  
> Cros<ni...@gmail.com> wrote:
>
>> The other one not :
>>
>> [debug] ssl_engine_kernel.c(1571): Proxy client certificate callback:
>> (myproxy:443) no client certificate found!?
>>
>> I wonder myself how clients certificates are choosen ? Any thoughts ?
>
> I'd suspect that the client certificate for the second host wasn't
> found in /etc/httpd/conf/ssl/SSLproxy.pem
>
> Krist


--
Nicolas Cros
Connaissez vous la maison du cordonnier ?
Elle se trouve ici : http://barsa.free.fr


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org