Do you know how what kind of a proxy and how it's configured? To help you out with your problem it would be good to know both ends of a channel. On 1/23/07, DEVAL SHAH <devals9@xxxxxxxxxxx> wrote:
Hi Serge, No it is not a regular browser. It is some proxy which our clients use. Thank you. >From: "Serge Dubrouski" <sergeyfd@xxxxxxxxx> >Reply-To: users@xxxxxxxxxxxxxxxx >To: users@xxxxxxxxxxxxxxxx >Subject: Re: Does apache check client certificate even if >SSLVerifyClient is none? >Date: Tue, 23 Jan 2007 15:46:12 -0700 > >How does a client send a certificate if Apache doesn't ask for it? >What kind of a "client" do you have? Is it a regular browser? > >On 1/23/07, DEVAL SHAH <devals9@xxxxxxxxxxx> wrote: >>Hello, >>I have a configuration in Apache file setup for SSL. I am not doing client >>authentication as >>SSLVerifyClient is commented ie. >>#SSLVerifyClient none >> >>It works fine for few people. When a client sends a certificate it does >>not >>work. Our logs indicate this error: >>SSL Library Error: 336151570 error:14094412:SSL >>routines:SSL3_READ_BYTES:sslv3 alert bad certificate Subject CN in >>certificate not server name or identical to CA!? >> >>Any idea what I should do to resolve this? >> >>Thank you in advance >>Deval >> >> >> >>--------------------------------------------------------------------- >>The official User-To-User support forum of the Apache HTTP Server Project. >>See <URL:http://httpd.apache.org/userslist.html> for more info. >>To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx >> " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx >>For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx >> >> > >--------------------------------------------------------------------- >The official User-To-User support forum of the Apache HTTP Server Project. >See <URL:http://httpd.apache.org/userslist.html> for more info. >To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx >For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|