On Mon, 29 Aug 2005, Axel-Stéphane SMORGRAV wrote: > SSLVerifyClient is documented as working in directory context, so it should also work in <Location> context. The manual page for mod_ssl does explicitly say that a SSL renegotiation is triggered if a request for the location is received. > > http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslverifyclient > > -ascs > > > here is an example: > > > > <VirtualHost> > SSLVerifyClient optional > > Alias /auth /htdocs/authorisation > <Location "/auth"> > SSLVerifyClient require > SSLOptions +ExportCertData +StdEnvVars > SSLVerifyDepth 5 > Options None > </Location> > > </VirtualHost> > > > Best Regards , > Yefym > There is a document bug in using SSLVerifyClient inside a <Location> in 2.x. http://issues.apache.org/bugzilla/show_bug.cgi?id=12355 ---------------------------------------- "Mon aéroglisseur est plein d'anguilles" John P. Dodge Boeing Shared Services --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx