This is a discussion on Apache + modSSL + errorDoc within the Apache Web Server forums, part of the Web Server and Related Forums category; Hello, I've got a little problem with my errors docs with SSL. I explain. Here is the structure of ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hello,
I've got a little problem with my errors docs with SSL. I explain. Here is the structure of my test website : www \--docs \--errors I set up a SSL with auto-signed certs. It works ok. Now, I want to authenticate users with certs. It also works :) When the user cert is not the one I expect, It says 403 :) When I want to customize my 403.txt message, I use ErrorDocument 403 /errors/403.txt but, it doesn't work and answer the an error occured when processing the Errordocument directive. in the logs " failed, reason: SSL requirement expression not fulfilled (see SSL logfile for more details)" If you ask for, here is my config : <VirtualHost *:443> ServerAdmin xxxx@xxxxx DocumentRoot /www ServerName doff.servebeer.com ErrorLog logs/www-log LogFormat "%a %h %t %u \"%r\" %>s %b %X %{SSL_PROTOCOL}x % {SSL_CIPHER}x %{SSL_CLIENT_S_DN}x" custom CustomLog logs/doff.servebeer.com-log custom # SSL mode SSLEngine on SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSL v2: +EXP:+eNULL SSLCertificateFile /disk/sites/CERTS/www.crt SSLCertificateKeyFile /disk/sites/CERTS/www.key SSLCACertificateFile /disk/sites/CERTS/ca.crt SSLVerifyClient optional SSLOptions StdEnvVars OptRenegotiate SSLCACertificatePath /disk/sites/CERTS/valid/ SSLCARevocationPath /disk/sites/CERTS/revoqued/ SSLVerifyDepth 1 ErrorDocument 403 /errors/403.txt <Directory /www> SSLRequire %{SSL_CLIENT_I_DN} =~ m/CN=MY_CN/ Options Indexes </Directory> # Error pages <Directory /www/errors> SSLOptions +FakeBasicAuth SSLVerifyClient none Options Indexes AllowOverride all Order Allow,Deny Allow from all Satisfy any </Directory> </VirtualHost> So, my question is : is it possible to have a complete site access with users certs, EXCEPT one subdirectory, that shows errors in case you dont have user cert ? Thanks in advance. |