CAcert Code Development list.

[Jan Dittberner <jandd AT cacert.org>]

On Sun, Mar 13, 2016 at 11:43:24AM +0100, Karl-Heinz Gödderz wrote:
> Hi there,
> 
> I'm trying to install cats on my computer and in the INSTALL.txt I found
> 
> - Make sure that the directive "SSLVerifyClient optional" or
> "SSLVerifyClient require"
>   are active for the CATS web directory, otherwise no client certificate
> login is requested
>   from your browser
> 
> where has  this to happen?
> 
> I'm not very used in apache-configuration or where else this has to be done.
>
> Can please someone help me ?

Hello,

these directives appear in the VirtualHost block for the cats virtual host:

--- 8< -------------------------------------------------------------------
NameVirtualHost *:443

<VirtualHost *:443>
    SSLEngine On
    SSLCertificateFile /home/cats/ssl/certs/cats_cert.pem
    SSLCertificateKeyFile /home/cats/ssl/private/cats_privatekey.pem
    SSLCACertificateFile /usr/share/ca-certificates/cacert.org/cacert.org.crt
    SSLVerifyDepth  10
    SSLOptions +StdEnvVars +ExportCertData +StrictRequire
    SSLVerifyClient require

    ServerAdmin 
support AT cacert.org
    DocumentRoot /home/cats/public_html
    ServerName cats.cacert.org
    ErrorLog /home/cats/logs/error.log
    CustomLog /home/cats/logs/access.log "%h %l %{SSL_CLIENT_S_DN_Email}x %t 
\"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\""

</VirtualHost>
--- 8< -------------------------------------------------------------------

> and next question is, what charset  the cats directory is. utf-8?

According to the output of file it is a mixture of ISO-8859-1 and UTF-8.
There is an open issue to use UTF-8 everywhere [1]. The issue contains some
comments on the consequences that have to be considered for a switch to
UTF-8.

[1] http://bugs.cacert.org/view.php?id=610


Kind regards
Jan

-- 
Jan Dittberner - CAcert Infrastructure Team
Software Architect, Debian Developer
GPG-key: 4096R/558FB8DD 2009-05-10
         B2FF 1D95 CE8F 7A22 DF4C  F09B A73E 0055 558F B8DD
https://jan.dittberner.info/

Attachment: smime.p7s
Description: S/MIME cryptographic signature