Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My application requires per-directory verification of SSL client certificates (i.e. when user requests /foo we require they have a client certificate and verify it, but when they request /bar we don't care if they have a client cerficiate). Apache has nice support for this, as the SSLVerifyClient setting can be applied on a per-directory basis, and apache will do SSL renegotiation in this instance to require the certs when needed, but not prompt for a certificate when accessing other directories.

My question is: which other web servers have this capability? Using apache to fulfil the SSL handling requirement is OK, but it is not my only requirement and I would like to know what the other options are.

share|improve this question
    
Lighttpd, base on bug track and their wiki, should have support for client cert for some years. However, I am not able to find any useful info on how to set it up. – John Siu Dec 20 '12 at 23:56

As a negative response, nginx only supports ssl_verify_client at the http and server scopes, so it can't do per-directory SSL client certificates.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.