elaka / mod-spdy

Automatically exported from code.google.com/p/mod-spdy
0 stars 0 forks source link

SSLVerifyClient didn't work #42

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago
SSLVerifyClient didn't work with mod_spdy enabled.

The same configuration, except mod_dpdy, works as expected.

...
SSLVerifyClient require
SSLVerifyDepth  5
SSLOptions +StdEnvVars +ExportCertData +FakeBasicAuth +OptRenegotiate
SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)/ \
    and %{SSL_CLIENT_I_DN_CN} eq "XXXXXXXXXXXXX" \
    and %{SSL_CLIENT_S_DN_Email} in {"XXXXXXXXXXXXX", "XXXXXXXXXXXXX"} \
    and %{SSL_CLIENT_S_DN_D} in {"XXXXXXXXXXXXX", "XXXXXXXXXXXXX"} \
)
...

Original issue reported on code.google.com by hilbr...@gmail.com on 13 May 2012 at 6:00

GoogleCodeExporter commented 8 years ago

Original comment by mdste...@google.com on 7 Jun 2012 at 2:47