Re: [users@httpd] old game - method POST not allowed when using SSL client certs

["Serge Dubrouski" <sergeyfd@xxxxxxxxx>]

The only way is upgrading to 2.2.3. It's a well known bug in 2.0.XX
that was fixed in 2.2.X

On 10/12/06, masro <masro@xxxxxxx> wrote:
> Hi List,
>
> i do an update from Apache 2.0.54 to 2.0.59, now i've the following problem:
>
> The following VHOST configuration dosent work, when i use POST requests
> within the secured directory
>
> <VirtualHost *:443>
>        ServerName xgames.org
>        DocumentRoot "/htdocs/"
>        SSLEngine On
>        SSLCertificateFile conf/cert/server.crt
>        SSLCertificateKeyFile conf/cert/server.key
>        SSLCACertificateFile conf/cert/ca-bundle.cer
>        SSLVerifyDepth 3
>        SSLOptions +StdEnvVars +OptRenegotiate +ExportCertData
>        SSLVerifyClient optional
>        <Directory /htdocs/secure>
>                SSLVerifyClient require
>        </Directory>
> </VirtualHost>
>
> Got errors like:
> [Thu Oct 12 11:09:32 2006] [error] SSL Re-negotiation in conjunction
> with POST method not supported! hint: try SSLOptions +OptRenegotiate
>
> When i use the following configuration it work's. I've to use
> "SSLVerifyClient none" instead of "SSLVerifyClient optional", may it be
> a bug or a feature, possibly im only to stupid, please tell me if i'm a
> dump fool ;-)
>
> <VirtualHost *:443>
>        ServerName xgames.org
>        DocumentRoot "/htdocs/"
>        SSLEngine On
>        SSLCertificateFile conf/cert/server.crt
>        SSLCertificateKeyFile conf/cert/server.key
>        SSLCACertificateFile conf/cert/ca-bundle.cer
>        SSLVerifyDepth 3
>        SSLOptions +StdEnvVars +OptRenegotiate +ExportCertData
>        SSLVerifyClient none
>        <Directory /htdocs/secure>
>                SSLVerifyClient require
>        </Directory>
> </VirtualHost>
>
> Why i can't use "SSLVerifyClient optional" ?
>
> regards
> Christian Gottschalch
>
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx