I have several clients certificates that my Apache httpd server requires clients to have (made using the instructions at http://www.garex.net/apache/). I would like to have an authentication that also authenticates and allows only a client certificate to match a username/password combination.
For example, if I have two client certificates with CN user1
and user2
and .htpasswd file
user1:passwordA
user2:passwordB
I would like something like
SSLUserName %{SSL_CLIENT_S_DN_CN}
AuthName "Please enter your username and password"
AuthType Basic
AuthUserFile /path/.htpasswd
require valid-user
However, trying this results in 500 errors. What can I do?