Apache and client-authenticated SSL

This is a discussion on Apache and client-authenticated SSL within the Apache Web Server forums, part of the Web Server and Related Forums category; Hi, I was wondering if, when configuring Apache for client-authenticated SSL (i.e., using client certs), there is a ...


Go Back   Usenet Forums > Web Server and Related Forums > Apache Web Server

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-21-2007
ohaya
 
Posts: n/a
Default Apache and client-authenticated SSL

Hi,

I was wondering if, when configuring Apache for client-authenticated SSL
(i.e., using client certs), there is a way to configure Apache to force
a re-authentication of each HTTPS *request*? Note, when I say "each
HTTPS request" here, I mean each individual HTTPS request, not each SSL
connection.

Some background: We have an Apache webserver that is configured for
client-authenticated SSL ("SSLVerifyClient optional"). The Apache
webserver is mainly a proxy for a WebLogic app server.

In our case, the client workstations have smart card readers, and client
certs are stored on the smart cards.

We are encountering a problem where, when users access the Apache
server, they are getting re-prompted to enter their smart card PIN
multiple (many) times, even just to access the initial webpage.

I'm aware that there are some settings in the smart card "middleware"
that would cache either the users' PIN or their certificates. These
settings are currently set to not cache, and our management doesn't want
to change these settings, so I've been looking into what things could be
causing this behavior, and someone on another newgroup mentioned that it
may be possible that some webservers have a setting that would force a
re-"SSL"-authentication for each HTTPS request, but I'm not aware of a
setting like this.

So, I'm wondering if there is some way to configure Apache+SSL so that
this (re-authenticating) would occur with each individual HTTPS request?

Thanks in advance,
Jim
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 01:06 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0