Re: [apache-ssl] SSLVerifyClient 2
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [apache-ssl] SSLVerifyClient 2



Adam Laurie wrote:
> 
> Markus Grill wrote:
> >
> > hi,
> >
> > i don't know wether there is a problem with my configuration but
> > with the setting SSLVerifyClient 2 the server requests
> > a client certificate EVERY time i select a site from the server.
> > i thought the request will only be done once - before the
> > first site from the server is selected....
> 
> Since web connections are just a bunch of small independant
> transactions, there is no persistant 'connection' that you have
> authorised, therefore you will be prompted for your client cert for
> every new connection. Most browsers support automatic presentatation of
> client certs, so it's usually just a question of tweaking your browser's
> settings to get rid of this problem.

Also note that session caching can reduce the number of times you are
asked for a cert.

Cheers,

Ben.

-- 
Ben Laurie            |Phone: +44 (181) 735 0686| Apache Group member
Freelance Consultant  |Fax:   +44 (181) 735 0689|http://www.apache.org/
and Technical Director|Email: ben@algroup.co.uk |
A.L. Digital Ltd,     |Apache-SSL author     http://www.apache-ssl.org/
London, England.      |"Apache: TDG" http://www.ora.com/catalog/apache/

WE'RE RECRUITING! http://www.aldigital.co.uk/recruit/