CAcert System Admins discussion list

[Bernhard Fröhlich EDU <education AT cacert.org>]

Daniel Black schrieb:
> Bernhard,
>
> There's been two support requests to the public support list in a week. Can 
> this change be made to reduce support effort?
>
> https://lists.cacert.org/wws/arc/cacert-support/2009-04/msg00171.html
> https://lists.cacert.org/wws/arc/cacert-support/2009-04/msg00096.html
>   
Have the problems reported by Wytze been verified or solved? Currently I 
don't have much time for tests and I'd hate to do a hasty job here, 
resulting in even more work for support...

Ted
>   
> > Ok,
> >
> > I've tested it properly. The following directives are needed after enabling
> > mod_rewrite.
> >
> > RewriteEngine        on
> > RewriteCond     %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS
> > RewriteRule     .? - [F]
> > ErrorDocument 403 "You need a client side certificate to access this site"
> >
> > Then change 'SSLVerifyClient" to "optional'
> >
> > I suggest this be used for https://cats.cacert.org and
> > https://secure.cacert.org.
> >
> > Test here if you want https://community.cacert.org/test/
> >
> > Daniel Black
> > --
> > Email/List Administrator
> > CAcert
> >     
>
>

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature