Bluehost.com Web Hosting $6.95

Apache + modSSL + errorDoc

This is a discussion on Apache + modSSL + errorDoc within the Apache Web Server forums, part of the Web Server and Related Forums category; Hello, I've got a little problem with my errors docs with SSL. I explain. Here is the structure of ...


Go Back   Usenet Forums > Web Server and Related Forums > Apache Web Server

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-23-2006
doff
 
Posts: n/a
Default Apache + modSSL + errorDoc

Hello,

I've got a little problem with my errors docs with SSL. I explain.

Here is the structure of my test website :

www
\--docs
\--errors

I set up a SSL with auto-signed certs. It works ok. Now, I want to
authenticate users with certs.

It also works :) When the user cert is not the one I expect, It says 403
:)

When I want to customize my 403.txt message, I use

ErrorDocument 403 /errors/403.txt

but, it doesn't work and answer the an error occured when processing the
Errordocument directive. in the logs " failed, reason: SSL requirement
expression not fulfilled (see SSL logfile for more details)"

If you ask for, here is my config :

<VirtualHost *:443>
ServerAdmin xxxx@xxxxx
DocumentRoot /www
ServerName doff.servebeer.com
ErrorLog logs/www-log
LogFormat "%a %h %t %u \"%r\" %>s %b %X %{SSL_PROTOCOL}x %
{SSL_CIPHER}x %{SSL_CLIENT_S_DN}x" custom
CustomLog logs/doff.servebeer.com-log custom

# SSL mode
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSL v2:
+EXP:+eNULL
SSLCertificateFile /disk/sites/CERTS/www.crt
SSLCertificateKeyFile /disk/sites/CERTS/www.key
SSLCACertificateFile /disk/sites/CERTS/ca.crt
SSLVerifyClient optional
SSLOptions StdEnvVars OptRenegotiate
SSLCACertificatePath /disk/sites/CERTS/valid/
SSLCARevocationPath /disk/sites/CERTS/revoqued/
SSLVerifyDepth 1

ErrorDocument 403 /errors/403.txt

<Directory /www>
SSLRequire %{SSL_CLIENT_I_DN} =~ m/CN=MY_CN/
Options Indexes
</Directory>

# Error pages
<Directory /www/errors>
SSLOptions +FakeBasicAuth
SSLVerifyClient none
Options Indexes
AllowOverride all
Order Allow,Deny
Allow from all
Satisfy any
</Directory>
</VirtualHost>


So, my question is : is it possible to have a complete site access with
users certs, EXCEPT one subdirectory, that shows errors in case you dont
have user cert ?

Thanks in advance.
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 12:02 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0