Skip to Content.
Sympa Menu

shibboleth-dev - Apache setup not quite so simple

Subject: Shibboleth Developers

List archive

Apache setup not quite so simple


Chronological Thread 
  • From: "Scott Cantor" <>
  • To: "'Shibboleth Development'" <>
  • Subject: Apache setup not quite so simple
  • Date: Thu, 16 Jun 2005 13:07:03 -0400
  • Organization: The Ohio State University
Turns out mod_ssl's set up for 1.3 is a bit more complex than anticipated.
Nate, can you add this to the checklist's sample config for the SOAP vhost?

SSLVerifyClient 10

Any value is fine, just long enough for what anybody would be likely to use.
We have our own dpeth enforcement anyway.

Apparently even when optional_no_ca is used, mod_ssl gets overeager if the
client sends a chain of certs and rejects them out of hand. That was Eva's
problem over on shib-users.

-- Scott


Archive powered by MHonArc 2.6.16.

Top of Page