[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[no subject]
- <!--x-content-type: text/plain --> "http://www.w3.org/TR/html4/loose.dtd">
- <!--x-date: Tue Mar 2 18:33:24 2004 -->
- <!--x-from-r13: wxvaarl ng ybpnyargfbyhgvbaf.pbz (Xnzrf B. Yvaarl WWW) -->
- <!--x-message-id: [email protected] -->
- <!--x-subject: [ale] client certs for apache -->
- <li><em>date</em>: Tue Mar 2 18:33:24 2004</li>
- <li><em>from</em>: jkinney at localnetsolutions.com (James P. Kinney III)</li>
- <li><em>subject</em>: [ale] client certs for apache</li>
4 different web servers each with a ssl cert. 1 client cert that is
accepted by each server as valid to access the ssl areas of the web
sites hosted on each one.
One server/one client cert is easy. Do some ssl foo to make a server
cert and a client cert and sign the client cert with the server cert.
Park server cert securely and tell httpd.conf where it is. Import client
cert into browsers.
Do I need to set one machine as a CA, generate all certs for each server
on each individual machine, then sign each server cert by the CA cert?
Then make a client cert from the CA cert?
Too many really vague theory docs, not enough cookbook on this topic.
Any ideas?
--
James P. Kinney III \Changing the mobile computing world/
CEO & Director of Engineering \ one Linux user /
Local Net Solutions,LLC \ at a time. /
770-493-8244 \.___________________________./
<a rel="nofollow" href="http://www.localnetsolutions.com">http://www.localnetsolutions.com</a>
GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
<jkinney at localnetsolutions.com>
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00057" href="msg00057.html">[ale] client certs for apache</a></strong>
<ul><li><em>From:</em> thomaswood at mac.com (Thomas Wood)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00054.html">[ale] Jobs at SecureWorks in Atlanta</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00056.html">[ale] Perl Question</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00054.html">[ale] Jobs at SecureWorks in Atlanta</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00057.html">[ale] client certs for apache</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00055"><strong>Date</strong></a></li>
<li><a href="threads.html#00055"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>