[apache-ssl] handling of client certificates
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[apache-ssl] handling of client certificates



Ref:  Your note of 17 Aug 1998 15:44:17 +0100

I also have problems concerning the handling of client certificates.
For our purposes I need to use different combinations of the client
authentication options. In particular option 3 would be very relevant
to our tasks. If the client browser does not have sertificate everything
proceeds as expected. However, presenting a certificate, even provided
by valid CA (Thawte), does not work out. I see some messages in the
error log, but cannot see what is the problem. The messages are:
      SSL_Accept failed
      verify error:num=19:self signed certificate in certificate chain
      verify return:0
      SSL_Accept failed
      error:140890AC:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate
                     returned
Please tell me whether I should be using client certificates, issued by
Apache-SSL and what might be the problem

Thank you very much,
   Joris Mihaeli

P.S. I installed Apache 1.3.1 plus SSL 1.20, and  SSL 0.8.1b.