You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Hoda Nadeem <ho...@bah.com> on 2005/04/04 15:54:38 UTC
[users@httpd] Client Authentication
I am working on an SSL interface with smart cards with on board
certificates.
I have enabled client authentication in apache through the following
lines:
SSLVerifyClient require
SSLVerifyDepth 1
SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key
And, the server definitely requests the client certificate, but I get
the following errors:
[Sun Apr 03 04:02:04 2005] [warn] Init: Oops, you want to request client
authentication, but no CAs are known for verification!? [Hint:
SSLCACertificate*]
[Sun Apr 03 04:02:04 2005] [warn] RSA server certificate CommonName (CN)
`localhost.localdomain' does NOT match server name!?
[Mon Apr 04 09:07:04 2005] [error] Certificate Verification: Error (20):
unable to get local issuer certificate
The second error is obviously because I have a test certificate on my
server.
Following these errors, the system hangs...stays indefinitely in waiting
state, or goes to 'page cannot be found'
Any help is appreciated.
Thanks.
Nadeem