[users@httpd] Question about how to do certificate based authentication with Apache 2.0.50 ....

[Matthew McHugh <mm...@arrow.com>]

Hello All,
 
I am using Apache 2.0.50 on a Sun solaris webserver.  I am trying to limit
(for one virtual host) access to the site.  I want to limit the access to
one company that passes me their certificate.  Is there a way to do this
with apache 2.0.50?  I see that something can be done with client
authentication, but that requires me to create my own CA and hand out
certificates, then allow all certs signed by that CA to have access to the
environment.  My client will be using a Verisign signed certificate and I do
not wish to allow all clients with a Verisign signed certificate to access
my protected environment.
 
Is there a way to lock it down to only one certificate or do I need to allow
access to all clients passing certificates that are signed from a specific
CA?
 
 
Any help would be much appreciated.
 
 
Thanks,
 
 
Matt