Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories.

<VirtualHost 37.187.96.147:443>

  ServerName toto.com:443
  DocumentRoot /var/www/html/
  SSLEngine on
  SSLProtocol all
  SSLCipherSuite HIGH:MEDIUM
  SSLStrictSNIVHostCheck on
  SSLCertificateFile /etc/ssl/certificate-authority/certs/svn-webserver.crt
  SSLCertificateKeyFile /etc/ssl/certificate-authority/private/svn-webserver.key
  ErrorLog /var/log/httpd/svn-error_log
  CustomLog logs/svn-access "%t %u %{SVN-ACTION}e" env=SVN-ACTION
  SSLCACertificateFile /etc/ssl/certificate-authority/certs/ca.crt
  SSLVerifyDepth       5
  SSLVerifyClient require
  SSLVerifyDepth 1
  LogLevel debug
  <Location /svn/>
    DAV svn
    SSLOptions           +FakeBasicAuth +StrictRequire
    SSLRequireSSL
    AuthName             "Depot SVN namek"
    AuthType             Basic
    AuthBasicProvider    file
    AuthUserFile         /var/svn/.fakehttpsauth
    Require              valid-user
    SVNParentPath /var/svn/
    SVNListParentPath on
    AuthzSVNAccessFile /var/svn/authz
  </Location>
</VirtualHost>

but that's not really usefull cause a got this type of username for my svn

/C=xx/ST=xx/L=xx/CN=MyUser

How could I use the SSLUserName apache directive to make a fakeauth with just the SSL_CLIENT_S_DN_CN of the client certificate (MyUser)

i got the 2.2.15 version of apache so i cant use the AuthBasicFake directive :/

if someone could help me that could be great ;).

thanks all

share|improve this question
    
did you manage to trim down the SSLUSername to the value of CN? –  krisdigitx Mar 10 at 17:14

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.