Article View: fj.net.ldap
Article #214Apache 2.0.39 + ssl + ldap with client certificate authentication
From: sarath
Date: Sun, 29 Sep 2002 09:11
Date: Sun, 29 Sep 2002 09:11
26 lines
1667 bytes
1667 bytes
Dear group, Has anybody tried doing ldap client certificate authentication for an apache 2.0.39 ssl server ? Our environment is : RedHat linux 7.1 kernel 2.4.x apache 2.0.39 (inc. mod_ssl) openssl-engine-0.9.6g openldap (on a different redhat linux server) The apache website has a verisign server certificate, a self-signed CA certificate and all clients have certificates in the ldap server signed by this CA. When clients present their certificate to browse the Apache secure site, Apache should check the existence of their certificate in the LDAP server and also the validity of the contents of the certificate presented. Kindly provide some direction to any solution or resources related to this issue. Any help would be highly appreciated. TIA Sarath
Technical Details
Message-ID:
<an6g88$buf19@news.emirates.net.ae>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!paloalto-snf1.gtei.net!crtntx1-snh1.gtei.net!nycmny1-snf1.gtei.net!news.gtei.net!news-auh-1.emirates.net.ae!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103627,7ff49d60c005c7d1,start X-Google-Attributes: gid103627,public X-Google-ArrivalTime: 2002-09-29 02:16:55 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!paloalto-snf1.gtei.net!crtntx1-snh1.gtei.net!nycmny1-snf1.gtei.net!news.gtei.net!news-auh-1.emirates.net.ae!not-for-mail From: "sarath" <sarath.chandra@uaeexchange.com> Newsgroups: fj.net.ldap Subject: Apache 2.0.39 + ssl + ldap with client certificate authentication Date: Sun, 29 Sep 2002 13:11:18 +0400 Organization: EIM Lines: 28 Message-ID: <an6g88$buf19@news.emirates.net.ae> Reply-To: "sarath" <sarath.chandra@uaeexchange.com> NNTP-Posting-Host: 194.170.154.205 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106