Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I set a test server with a self signed SSL certificate and http-authentication with personal digital certificates issued by my test CA and everything works fine.

What if I want to authenticate users that have a digital certificate issued by several other trusted CAs in my country? What do I need to do (other than getting a real SSL certificate for the webserver) in order to make apache able to do that?

I suppose it has to do with the "SSLCACertificateFile" directive, but would like to hear someone who is more prepared on the subject.


share|improve this question

migrated from Aug 9 '11 at 0:00

This question came from our site for professional and enthusiast programmers.

up vote 0 down vote accepted

The answer to this question is the following:

Include the PEM encoded root certificate of the CA you want to be able to authenticate on your server in the file specified by the SSLCACertificateFile directive. CRL check is needed to ensure the private key of the certificate hasn't been compromised.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.