Re: SSLVerifyClient
This is a discussion on Re: SSLVerifyClient within the Modssl Users forums, part of the Web Server and Related Forums category; --Apple-Mail-19--70227880 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed This ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
06-28-2005
|
|||
|
|||
Re: SSLVerifyClient
--Apple-Mail-19--70227880 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed This can't be the problem, as I specify the CA using SSLCACertificatePath using the proper HASH names. I've also tried SSLCACertificateFile. using s_client with SSLVerifyClient optional, it shows that the server is correctly identifying which CAs are allowed. I think the problem is with Safari and Keychain. I shall look further into the matter. On Jun 28, 2005, at 10:27 AM, Paul Puschmann wrote: > I think that Eckard Wille might be right. So have some experiments > with > your ca-files and certificates. --Apple-Mail-19--70227880 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=US-ASCII <HTML><BODY style=3D"word-wrap: break-word; -khtml-nbsp-mode: space; = -khtml-line-break: after-white-space; "><DIV>This can't be the problem, = as I specify the CA using SSLCACertificatePath using the proper HASH = names. I've also tried SSLCACertificateFile.</DIV><DIV><BR = class=3D"khtml-block-placeholder"></DIV><DIV>using s_client with = SSLVerifyClient optional, it shows that the server is correctly = identifying which CAs are allowed.</DIV><DIV><BR = class=3D"khtml-block-placeholder"></DIV><DIV>I think the problem is with = Safari and Keychain. I shall look further into the = matter.</DIV><BR><DIV><DIV>On Jun 28, 2005, at 10:27 AM, Paul Puschmann = wrote:</DIV><BR class=3D"Apple-interchange-newline"><BLOCKQUOTE = type=3D"cite"><P style=3D"margin: 0.0px 0.0px 0.0px 0.0px"><FONT = face=3D"Helvetica" size=3D"3" style=3D"font: 12.0px Helvetica">I think = that Eckard Wille might be right. So have some experiments = with</FONT></P> <P style=3D"margin: 0.0px 0.0px 0.0px 0.0px"><FONT = face=3D"Helvetica" size=3D"3" style=3D"font: 12.0px Helvetica">your = ca-files and certificates.</FONT></P> = </BLOCKQUOTE></DIV><BR></BODY></HTML>= --Apple-Mail-19--70227880-- __________________________________________________ ____________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager majordomo@modssl.org 
|
 |
«
Previous Thread
|
Next Thread
»
| Thread Tools | |
| Display Modes | |
Linear Mode
|
|
All times are GMT +1. The time now is 10:02 PM.
