You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2007/04/14 09:29:26 UTC
DO NOT REPLY [Bug 12355] - POST incompatible w/ renegotiate https: connection
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=12355>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=12355
derrierdo@gmail.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |REOPENED
Resolution|FIXED |
------- Additional Comments From derrierdo@gmail.com 2007-04-14 00:29 -------
this bug is always present with Apache/2.2.4.
You can't mixed SSLVerifyClient optinal and SSLVerifyClient requierd part
To allow some Location for non SSL valid Client.
NOT WORKING ========
------------------------
SSLVerifyClient optional
SSLVerifyDepth 1
SSLOptions +OptRenegotiate
<Location /Album>
SSLRequireSSL
SSLVerifyClient require
SSLCACertificateFile conf/ssl.crt/Root_Certificat.crt
SSLCACertificatePath conf/ssl.crt
SSLRequire (%{SSL_CLIENT_S_DN_OU} eq "Portable" || %{SSL_CLIENT_S_DN_OU} eq
"Personnal")
SSLVerifyDepth 3
#FIX ANOTHER BUG
SetEnv REMOTE_USER ${SSL_CLIENT_S_DN_CN}
SSLUserName SSL_CLIENT_S_DN_CN
</location>
WORKING ==
---------
--
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org