[users@httpd] Client Authentication

["Hoda Nadeem" <hoda_nadeem@xxxxxxx>]

 

I am working on an SSL interface with smart cards with on board certificates.

 

I have enabled client authentication in apache through the following lines:

 

SSLVerifyClient require
SSLVerifyDepth 1
SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt
SSLCertificateKeyFile /etc/httpd/conf/ssl.key/server.key

And, the server definitely requests the client certificate, but I get the following errors:

 

[Sun Apr 03 04:02:04 2005] [warn] Init: Oops, you want to request client authentication, but no CAs are known for verification!?  [Hint: SSLCACertificate*]
[Sun Apr 03 04:02:04 2005] [warn] RSA server certificate CommonName (CN) `localhost.localdomain' does NOT match server name!?
[Mon Apr 04 09:07:04 2005] [error] Certificate Verification: Error (20): unable to get local issuer certificate

The second error is obviously because I have a test certificate on my server.

 

Following these errors, the system hangs...stays indefinitely in waiting state, or goes to 'page cannot be found'

 

Any help is appreciated.

 

Thanks.

 

Nadeem