This message is normal. It says that server expected user certificate but it wasn't presented by browser. On Tue, Apr 13, 2010 at 5:31 PM, <KennethYeung@xxxxxxxxxxxxxxxx> wrote: > > Greeting! > > I'm having a problem on setting up client certificate on my test site on > Apache 2.2.15/OpenSSL 0.9.8m on Windows XP. I followed the "How-To" > articles on mod_ssl (http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html). > When I browse the site, I got the following error message in the log: > > Re-negotiation handshake failed: Not accepted by client!? > > I read through the documentation. I tried to turn SSLInsecureRenegotiation > on and off, but no luck. I attached the configuration of my virtual host, > hoping that you would point out anything that I've missed. Oh, when I said > that the site wasn't working, I was referring to my browser, which displays > an error page with the code: ssl_error_handshake_failure_alert, instead of > asking me for a certificate. > > Thanks, > > Kenneth Yeung > > > <VirtualHost *:10991> > ServerAdmin mysite@xxxxxxxxxxxxx > DocumentRoot "C:/hosts-static/mysite/ROOT" > ServerName mysite.mycompany.com > ErrorLog "C:/hosts-static/mysite/log/ROOT-error.log" > CustomLog "C:/hosts-static/mysite/log/ROOT-access.log" common > > SSLEngine on > SSLCipherSuite HIGH:MEDIUM > SSLCertificateFile "C:/Apache2.2/conf/ssl.crt/mysite.crt" > SSLCertificateKeyFile "C:/Apache2.2/conf/ssl.crt/mysite.key" > > SSLInsecureRenegotiation on > > <Directory C:/hosts-static/mysite/ROOT> > Order deny,allow > Allow from all > > SSLVerifyClient require > SSLVerifyDepth 1 > SSLCACertificateFile "C:/Apache2.2/conf/ssl.crt/self_signed_ca.crt" > > </Directory> > > </VirtualHost> -- Serge Dubrouski. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|