Client certificates
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Client certificates



Dear friends,

Please tell me what I am missing with the setup of Apache-SSL (Apache 1.3.1
SSLeay 0.9.0b, and patch 131-1.20). I made test certificate with "make
certificate" and set it as server certificate in the httpd.conf.
With VerifyClient set to 0 I can connect to the Web server with Netscape
irrespective of whether I have client certificate or not. However with
VerifyClient set to 1,2,or 3 I cannot connect at all if I have certificate
(from Thowte), and if I dont have - then 1, and 3 work out and get refusal
on option 2 as expected. Sometimes there appear the following messages

      SSL_Accept failed
      verify error:num=19:self signed certificate in certificate chain
      verify return:0
      SSL_Accept failed
      error:140890AC:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate
                     returned

Thanks,
  Joris