You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "John P. Dodge" <do...@cruciate.ca.boeing.com> on 2005/08/29 19:23:11 UTC

RE: [users@httpd] Bug or Feature : global SSLVerifyClient in overrides the same in ?

On Mon, 29 Aug 2005, Axel-Stéphane  SMORGRAV wrote:

> SSLVerifyClient is documented as working in directory context, so it should also work in <Location> context. The manual page for mod_ssl does explicitly say that a SSL renegotiation is triggered if a request for the location is received.
>
> http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslverifyclient
>
> -ascs
>
>
> here is an example:
>
>
>
> <VirtualHost>
> SSLVerifyClient optional
>
> Alias /auth   /htdocs/authorisation
> <Location "/auth">
> SSLVerifyClient require
> SSLOptions +ExportCertData +StdEnvVars
> SSLVerifyDepth 5
> Options None
> </Location>
>
> </VirtualHost>
>
>
> Best Regards ,
> Yefym
>

There is a document bug in using SSLVerifyClient inside a <Location> in
2.x.

http://issues.apache.org/bugzilla/show_bug.cgi?id=12355


----------------------------------------

"Mon aéroglisseur est plein d'anguilles"
John P. Dodge
Boeing Shared Services



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org