[Mod_nss-list] NSSVerifyClient Require - doesn't work in <LocationMatch> directive

[Rob Crittenden]

Smith, Albert L CTR OSD ATL wrote:
> Hi Rob.
>
> I haven't yet heard anything regarding this question.  I apologize if I'm sending it to you inappropriately; if that's the case then I would much appreciate it if you would guide me to the appropriate person/group.  If you are the appropriate person/group then will you give me an idea of when I might get an answer?

I believe this is BZ  https://bugzilla.redhat.com/show_bug.cgi?id=749402 
, it is targetted for the next RHEL 5 release.

rob

>
> Much thanks.
>
> -Albert Smith
> Infrastructure Team
> OUSD(AT&L) eBusiness Center
> 703 571-3015
>
>
> -----Original Message-----
> From: Smith, Albert L CTR OSD ATL
> Sent: Wednesday, August 01, 2012 10:01 AM
> To: 'rcritten at redhat.com'
> Cc: 'mod_nss-list at redhat.com'
> Subject: NSSVerifyClient Require - doesn't work in <LocationMatch> directive
>
> Greetings.
>
> I got these two email addresses from the following thread (https://www.redhat.com/archives/mod_nss-list/2010-September/msg00004.html) so I hope that I'm reaching the appropriate person/group for my question.
>
> I'm running OEL-5 (Oracle Enterprise Linux, version 5), Apache 2.2.3, NSPR-4.8.9-1 and NSS-3.13.1-5.0.1
>
> The server is used as a proxy server with a mix of 'Location's requiring client verification and not requiring verification.
>
> To support this I'm trying to use 'NSSVerifyClient Require' inside of the <LocationMatch> directive and it's not working correctly, it behaves the same as 'Optional'.
>
> However, 'NSSVerifyClient' works correctly inside of the <LocationMatch> directive using 'None' and 'Optional'.
>
> Is this a known issue?
> Is there a way to get this working?
>
> This worked successfully using 'mod_ssl' using 'SSLVerifyClient Require'.
>
> -Albert Smith
> Infrastructure Team
> OUSD(AT&L) eBusiness Center
> 703 571-3015
>
>