From Albert.Smith.CTR at osd.mil Wed Aug 1 14:01:10 2012 From: Albert.Smith.CTR at osd.mil (Smith, Albert L CTR OSD ATL) Date: Wed, 1 Aug 2012 10:01:10 -0400 Subject: [Mod_nss-list] NSSVerifyClient Require - doesn't work in directive Message-ID: Greetings. I got these two email addresses from the following thread (https://www.redhat.com/archives/mod_nss-list/2010-September/msg00004.html) so I hope that I'm reaching the appropriate person/group for my question. I'm running OEL-5 (Oracle Enterprise Linux, version 5), Apache 2.2.3, NSPR-4.8.9-1 and NSS-3.13.1-5.0.1 The server is used as a proxy server with a mix of 'Location's requiring client verification and not requiring verification. To support this I'm trying to use 'NSSVerifyClient Require' inside of the directive and it's not working correctly, it behaves the same as 'Optional'. However, 'NSSVerifyClient' works correctly inside of the directive using 'None' and 'Optional'. Is this a known issue? Is there a way to get this working? This worked successfully using 'mod_ssl' using 'SSLVerifyClient Require'. -Albert Smith Infrastructure Team OUSD(AT&L) eBusiness Center 703 571-3015 From Albert.Smith.CTR at osd.mil Fri Aug 17 19:37:52 2012 From: Albert.Smith.CTR at osd.mil (Smith, Albert L CTR OSD ATL) Date: Fri, 17 Aug 2012 15:37:52 -0400 Subject: [Mod_nss-list] NSSVerifyClient Require - doesn't work in directive In-Reply-To: References: Message-ID: Hi Rob. I haven't yet heard anything regarding this question. I apologize if I'm sending it to you inappropriately; if that's the case then I would much appreciate it if you would guide me to the appropriate person/group. If you are the appropriate person/group then will you give me an idea of when I might get an answer? Much thanks. -Albert Smith Infrastructure Team OUSD(AT&L) eBusiness Center 703 571-3015 -----Original Message----- From: Smith, Albert L CTR OSD ATL Sent: Wednesday, August 01, 2012 10:01 AM To: 'rcritten at redhat.com' Cc: 'mod_nss-list at redhat.com' Subject: NSSVerifyClient Require - doesn't work in directive Greetings. I got these two email addresses from the following thread (https://www.redhat.com/archives/mod_nss-list/2010-September/msg00004.html) so I hope that I'm reaching the appropriate person/group for my question. I'm running OEL-5 (Oracle Enterprise Linux, version 5), Apache 2.2.3, NSPR-4.8.9-1 and NSS-3.13.1-5.0.1 The server is used as a proxy server with a mix of 'Location's requiring client verification and not requiring verification. To support this I'm trying to use 'NSSVerifyClient Require' inside of the directive and it's not working correctly, it behaves the same as 'Optional'. However, 'NSSVerifyClient' works correctly inside of the directive using 'None' and 'Optional'. Is this a known issue? Is there a way to get this working? This worked successfully using 'mod_ssl' using 'SSLVerifyClient Require'. -Albert Smith Infrastructure Team OUSD(AT&L) eBusiness Center 703 571-3015 From rcritten at redhat.com Fri Aug 17 20:03:09 2012 From: rcritten at redhat.com (Rob Crittenden) Date: Fri, 17 Aug 2012 16:03:09 -0400 Subject: [Mod_nss-list] NSSVerifyClient Require - doesn't work in directive In-Reply-To: References: Message-ID: <502EA37D.9030703@redhat.com> Smith, Albert L CTR OSD ATL wrote: > Hi Rob. > > I haven't yet heard anything regarding this question. I apologize if I'm sending it to you inappropriately; if that's the case then I would much appreciate it if you would guide me to the appropriate person/group. If you are the appropriate person/group then will you give me an idea of when I might get an answer? I believe this is BZ https://bugzilla.redhat.com/show_bug.cgi?id=749402 , it is targetted for the next RHEL 5 release. rob > > Much thanks. > > -Albert Smith > Infrastructure Team > OUSD(AT&L) eBusiness Center > 703 571-3015 > > > -----Original Message----- > From: Smith, Albert L CTR OSD ATL > Sent: Wednesday, August 01, 2012 10:01 AM > To: 'rcritten at redhat.com' > Cc: 'mod_nss-list at redhat.com' > Subject: NSSVerifyClient Require - doesn't work in directive > > Greetings. > > I got these two email addresses from the following thread (https://www.redhat.com/archives/mod_nss-list/2010-September/msg00004.html) so I hope that I'm reaching the appropriate person/group for my question. > > I'm running OEL-5 (Oracle Enterprise Linux, version 5), Apache 2.2.3, NSPR-4.8.9-1 and NSS-3.13.1-5.0.1 > > The server is used as a proxy server with a mix of 'Location's requiring client verification and not requiring verification. > > To support this I'm trying to use 'NSSVerifyClient Require' inside of the directive and it's not working correctly, it behaves the same as 'Optional'. > > However, 'NSSVerifyClient' works correctly inside of the directive using 'None' and 'Optional'. > > Is this a known issue? > Is there a way to get this working? > > This worked successfully using 'mod_ssl' using 'SSLVerifyClient Require'. > > -Albert Smith > Infrastructure Team > OUSD(AT&L) eBusiness Center > 703 571-3015 > >