cacert-sysadm AT lists.cacert.org

Subject: CAcert System Admins discussion list

List archive

Re: https unintuitave client side error messages

From: Daniel Black <daniel AT cacert.org>
To: cacert-sysadm AT lists.cacert.org
Cc: Wytze van der Raay <wytze AT deboca.net>, cats AT cacert.org
Subject: Re: https unintuitave client side error messages
Date: Thu, 23 Apr 2009 11:47:12 +1000
Authentication-results: lists.cacert.org; dkim=neutral header.i= AT cacert.org; dkim-asp=none
Organization: CAcert

> It seems to work just fine there, but the same trick applied to
> https://secure.cacert.org/ just failed miserably.
> Sure enough, the 403 error message came out, but it did also when
> performing a certificate login from http://www.cacert.org/.
> That's less than helpful I am afraid.

sounds very unhelpful.

> I do not quite understand why this happens, it requires further
> testing in a non-critical environment.
true. I don't have access to one currently.

options at a guess:
1. move the Rewrite* to the VirtualHost or Location(?) or Directory tag
2. another inline RewriteCond like %{HTTPS}=on and/or %{SERVER_ADDR}=ip of
secure.cacert.org

[1] http://httpd.apache.org/docs/2.0/mod/mod_rewrite.html#rewritecond

Daniel Black
--
Email/List Administrator
CAcert

https unintuitave client side error messages, Daniel Black, 04/15/2009
- Re: https unintuitave client side error messages, Daniel Black, 04/19/2009
  - Re: https unintuitave client side error messages, Wytze van der Raay, 04/22/2009
    - Re: https unintuitave client side error messages, Daniel Black, 04/23/2009
  - Message not available
    - Re: https unintuitave client side error messages, Bernhard Fröhlich EDU, 04/27/2009