Re: Re: [EXTERNAL] Re: [users@httpd] OCSP Stapling Configuration Setup

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





El lun, 17 abr 2023 a las 21:19, Quintin Ash (<qash@xxxxxxxxxxx>) escribió:
Yes I have that as well
SSLVerifyClient require
SSLVerifyDepth 10

I also have FIPS enabled (not sure if that matters).




Well, it should be working if everything is in the right place.

Increase debug level to trace7 and check the mod_ssl traces to see what is really going on.

You can do this with LogLevel ssl:trace7

It is a good practice to share the configuration you have within its own context, you can see what you really have, we can't. As in, you could have SSLVerifyClient require in a path and the request going for another and then that directive having no effect, etc.

Also turn "SSLOCSPOverrideResponder off" for these tests.

 
--
Daniel Ferradal
HTTPD Project
#httpd help at Libera.Chat

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux