I have a <Location>
within a virtualhost that looks like this:
<Location /app1/>
SSLVerifyClient require
SSLVerifyDepth 2
SSLRequireSSL
SSLOptions +OptRenegotiate
SSLCipherSuite HIGH
SSLRequire %{SSL_CLIENT_S_DN_OU} eq "Customer1" \
or %{SSL_CLIENT_S_DN_OU} eq "Customer2" \
or %{SSL_CLIENT_S_DN_OU} eq "Customer3"
</Location>
This requires everyone who wants to access /app1/ to present a client certificate to the server. Backend server is tomcat.
Is it possible to "route" visitors who don't authenticate to a different location than visitors who have a certificate? E.g. the ones with no certificate get less functionality...
Thank you