Re: Does apache check client certificate even if SSLVerifyClient is none?

["DEVAL SHAH" <devals9@xxxxxxxxxxx>]

Hi Serge,
No it is not a regular browser. It is some proxy which our clients use.

Thank you.


> From: "Serge Dubrouski" <sergeyfd@xxxxxxxxx>
> Reply-To: users@xxxxxxxxxxxxxxxx
> To: users@xxxxxxxxxxxxxxxx
> Subject: Re:  Does apache check client certificate even if 
> SSLVerifyClient is none?
> Date: Tue, 23 Jan 2007 15:46:12 -0700
>
> How does a client send a certificate if Apache doesn't ask for it?
> What kind of a "client" do you have? Is it a regular browser?
>
> On 1/23/07, DEVAL SHAH <devals9@xxxxxxxxxxx> wrote:
> > Hello,
> > I have a configuration in Apache file setup for SSL. I am not doing client
> > authentication as
> > SSLVerifyClient is commented ie.
> > #SSLVerifyClient none
> >
> > It works fine for few people. When a client sends a certificate it does 
> > not
> > work. Our logs indicate this error:
> > SSL Library Error: 336151570 error:14094412:SSL
> > routines:SSL3_READ_BYTES:sslv3 alert bad certificate Subject CN in
> > certificate not server name or identical to CA!?
> >
> > Any idea what I should do to resolve this?
> >
> > Thank you in advance
> > Deval
> >
> >
> >
> > ---------------------------------------------------------------------
> > The official User-To-User support forum of the Apache HTTP Server Project.
> > See <URL:http://httpd.apache.org/userslist.html> for more info.
> > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> >    "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx