This is a discussion on reverse proxy with chained signed client certificate fails within the Linux Web Servers forums, part of the Web Server and Related Forums category; Hi list, I try to set up a reverse proxy connection with modssl and client-certificate-authentification. It works fine ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi list,
I try to set up a reverse proxy connection with modssl and client-certificate-authentification. It works fine if I have one client-certificate with it's private key in one concatenatened file. I put this in a directory and put the directorys name in 'SSLProxyMachineCertificatePath'. But I have a second connection wich uses a client-certificate and this is signed by chained root-certificates: myclient-certificate<=middle-signer-certifcate<=root-signer-certifcate If I put this PKCS7-file with the private key in one file then 'make' (making hash key with openssl-script) failes for this file. If I put all the 'myclient-certificate', the 'middle-signer-certifcate', 'root-signer-certifcate' and the private key in a concatenated file then 'make' succedes but modssl sends the 'middle-signer-certifcate' for client-authentification. This fails. Any sugestions how to use a 'chain-signed' client-certificate for client-certificate-autentification with modssl? best regards Armin Krone |
| Thread Tools | |
| Display Modes | |
|
|