| DanielP 2007-01-22, 1:17 pm |
| I googled, went through the apache and SSL docs and found couple examples,
however I could not get it to work.
I have a functional secure site which properly authenticates users with
login/pwd. However I have a need to make 1 dir require both a login and pwd
and an imported certificate.
After reading several reference guides I noticed that SSLVerifyClient was
listed under "Per-Server Based Directives", so I guess my 2 questions are:
1) Can I use the SSLVerifyClient directive for only 1 directory? 2) IF
no, then does anyone have any suggestions, or any links that might be
useful? I repeate I have already spent some time with google and have not
found anything that answers my questions. Any assistance would be
appreciated.
This is what my directory setup looks like, it works for all the other
directories without the last 2 lines for Basic Authentication.
<Directory "/somepath/cert_auth_test">
AuthType Basic
AuthName " Site"
AuthUserFile /somedir/webusers
AuthGroupFile /somedir/webgroup
Require group cert_auth_test
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
#Cert require lines
SSLVerifyClient require
SSLVerifyDepth 2
</Directory>
|