Mailing List Archive: SSL_CLIENT

Hi!

I have configured my apache server to request client certificates for
authentication for a specific location match.
This is how it is configured:

*<LocationMatch (/sec/)> *

*SSLOptions +ExportCertData +StdEnvVar*
*SSLVerifyClient optional_no_ca*

* Header always set SSL-CLIENT-CERT "%{SSL_CLIENT_CERT}e"*

* </LocationMatch>*

Many times I have found that the value of the *SSL-CLIENT-CERT ,*after
selecting a certificate, returns an empty or a null string.

Why is this happening if we are using valid certificates?
Are there any log files where I can find the cause of this error?

Thank you.
Best regards

Juan Francisco Jiménez Pérez

Analista

Área | MNEMO
+ 34 663 99 04 81
jf.jimenezperez@mnemo.com
www.mnemo.com
Cardenal Marcelo Spínola 14, 5ª planta, 28016 Madrid
<https://www.mnemo.com/>
[image: linkedin] <https://www.linkedin.com/company/mnemo/>
[image: linkedin] <https://twitter.com/_Mnemo>
[image: Instagram] <https://www.instagram.com/mnemo_ciber/>
[image: Youtube] <https://www.youtube.com/user/GrupoMNEMO>

Hello,

For mod_ssl it is *%{SSL_CLIENT_CERT}x*

El mar, 4 abr 2023 a las 13:55, Juan Francisco Jiménez Pérez (<
jf.jimenezperez@mnemo.com>) escribió:

> Hi!
>
> I have configured my apache server to request client certificates for
> authentication for a specific location match.
> This is how it is configured:
>
>
> *<LocationMatch (/sec/)> *
>
> *SSLOptions +ExportCertData +StdEnvVar*
> *SSLVerifyClient optional_no_ca*
>
>
> * Header always set SSL-CLIENT-CERT "%{SSL_CLIENT_CERT}e"*
>
>
>
>
> * </LocationMatch>*
>
> Many times I have found that the value of the *SSL-CLIENT-CERT ,*after
> selecting a certificate, returns an empty or a null string.
>
> Why is this happening if we are using valid certificates?
> Are there any log files where I can find the cause of this error?
>
> Thank you.
> Best regards
>
> Juan Francisco Jiménez Pérez
>
> Analista
>
> Área | MNEMO
> + 34 663 99 04 81
> jf.jimenezperez@mnemo.com
> www.mnemo.com
> Cardenal Marcelo Spínola 14, 5ª planta, 28016 Madrid
> <https://www.mnemo.com/>
> [image: linkedin] <https://www.linkedin.com/company/mnemo/>
> [image: linkedin] <https://twitter.com/_Mnemo>
> [image: Instagram] <https://www.instagram.com/mnemo_ciber/>
> [image: Youtube] <https://www.youtube.com/user/GrupoMNEMO>
>

--
Daniel Ferradal
HTTPD Project
#httpd help at Libera.Chat