Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Revoked certificate - client SSL auth in Apache HTTP 2.4.16 |
|
| Author |
|
Subodh
Joined: 07 Mar 2016
Posts: 1
Location: Japan, Tokyo
|
 Posted: Wed 09 Mar '16 5:48 Post subject: Revoked certificate - client SSL auth in Apache HTTP 2.4.16 |
 |
|
Done something like below for handling client certificate validation
SSLVerifyClient optional
SSLVerifyDepth 3
# error handling
RewriteEngine on
RewriteCond %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS
RewriteRule .? - [F]
ErrorDocument 403 "You need a client side certificate issued by CAcert to access this site"
Although I m getting desired result when certificate does not exist or no certificate is choosen. But when a revoked certificate is choosed(get list form CRL's), Http request get aborted and Error page is not displayed.
Searched regarding the same but no working solutiion is recieved.
Environment:
Apache HTTP 2.4.16
Linux
Thank you. |
|
| Back to top |
|
|
|
|
|
|
