Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

From the same host i will serve two sub domains with SSL, but one of them also needs client authentification.

NameVirtulaHost *:443
<VirtualHost *:443>
        ServerName mail.example.com

        SSLEngine on

        SSLCACertificateFile  /etc/apache2/ssl/server.crt
        SSLCertificateFile    /etc/apache2/ssl/server.crt
        SSLCertificateKeyFile /etc/apache2/ssl/server.key

</VirtualHost>
<VirtualHost *:443>
        ServerName erp.example.com

        SSLEngine on
        SSLVerifyClient require

        SSLCACertificateFile  /etc/apache2/ssl/server.crt
        SSLCertificateFile    /etc/apache2/ssl/server.crt
        SSLCertificateKeyFile /etc/apache2/ssl/server.key

</VirtualHost>

With the above config SSL is activated but no client certificate needed. If i change the order (first erp.example.com) then both domains need client certificate.

(Apache/2.2.9)

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

Simply first read this..

http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslverifyclient

it explains how to use SSLVerifyRequire

In per-directory context it forces a SSL renegotation with the reconfigured client verification level after the HTTP request was read but before the HTTP response is sent.

Any other questions please ask..

Hope this helps :D

share|improve this answer
    
You got me in the right direction. I didn't see this applicable because the erp.example.com is a proxy, but seems to work similiar. Thank you. –  PeterMmm Nov 14 '10 at 19:09
    
No problem.. :D –  Arenstar Nov 14 '10 at 19:19
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.