i just try to put an SSL authentification for a SVN server over https. I would like that the client certificate allow authorized person to check their repositories.
<VirtualHost 37.187.96.147:443>
ServerName toto.com:443
DocumentRoot /var/www/html/
SSLEngine on
SSLProtocol all
SSLCipherSuite HIGH:MEDIUM
SSLStrictSNIVHostCheck on
SSLCertificateFile /etc/ssl/certificate-authority/certs/svn-webserver.crt
SSLCertificateKeyFile /etc/ssl/certificate-authority/private/svn-webserver.key
ErrorLog /var/log/httpd/svn-error_log
CustomLog logs/svn-access "%t %u %{SVN-ACTION}e" env=SVN-ACTION
SSLCACertificateFile /etc/ssl/certificate-authority/certs/ca.crt
SSLVerifyDepth 5
SSLVerifyClient require
SSLVerifyDepth 1
LogLevel debug
<Location /svn/>
DAV svn
SSLOptions +FakeBasicAuth +StrictRequire
SSLRequireSSL
AuthName "Depot SVN namek"
AuthType Basic
AuthBasicProvider file
AuthUserFile /var/svn/.fakehttpsauth
Require valid-user
SVNParentPath /var/svn/
SVNListParentPath on
AuthzSVNAccessFile /var/svn/authz
</Location>
</VirtualHost>
but that's not really usefull cause a got this type of username for my svn
/C=xx/ST=xx/L=xx/CN=MyUser
How could I use the SSLUserName apache directive to make a fakeauth with just the SSL_CLIENT_S_DN_CN of the client certificate (MyUser)
i got the 2.2.15 version of apache so i cant use the AuthBasicFake directive :/
if someone could help me that could be great ;).
thanks all