Post Reply 
 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Problem with certificates
2014-07-22, 16:36 (This post was last modified: 2014-07-22 19:50 by robinsmidsrod.)
Post: #18
RE: Problem with certificates
(2014-07-22 16:17)welty Wrote:  iPXE with http over SSL works well in its standard usage: the fact for a client to trust the connection with the server thanks to the root certificate embedded with the ipxe binary in order to get a trusted enciphered communication between those peers. But when we also embed client certificate (with a private key without passphrase) to authenticate it, it seems that the use of SSLVerifyClient in Apache (which is necessary to authenticate the client) leads to a SSL renegociation (this happens each time and we have no idea to avoid this behaviour). Since you say it is an optional feature of TLS and not implemented into ipxe, could we consider the client authentification is not a feature which is available in ipxe ?
Or could you please give me a apache configuration to test, because I'm lost :-(

Client certificate authentication does work, at least the last time I tested it.

Could you post the contents of all applicable .htaccess files within the path to the URI you are trying to access with iPXE?

In particular, do you have a SSLCipherSuite directive within any .htaccess file?

Michael
Visit this user's website Find all posts by this user
Quote this message in a reply
Post Reply 


Messages In This Thread
Problem with certificates - welty - 2014-05-28, 07:59
RE: Problem with certificates - mcb30 - 2014-06-02, 11:03
RE: Problem with certificates - welty - 2014-06-02, 13:08
RE: Problem with certificates - mcb30 - 2014-06-02, 13:42
RE: Problem with certificates - welty - 2014-06-03, 09:12
RE: Problem with certificates - welty - 2014-06-03, 10:24
RE: Problem with certificates - mcb30 - 2014-06-03, 11:15
RE: Problem with certificates - welty - 2014-06-03, 11:53
RE: Problem with certificates - mcb30 - 2014-06-11, 20:15
RE: Problem with certificates - welty - 2014-06-12, 15:25
RE: Problem with certificates - mcb30 - 2014-06-12, 15:47
RE: Problem with certificates - welty - 2014-06-17, 14:29
RE: Problem with certificates - mcb30 - 2014-06-17, 15:03
RE: Problem with certificates - welty - 2014-07-21, 15:09
RE: Problem with certificates - mcb30 - 2014-07-21, 17:45
RE: Problem with certificates - welty - 2014-07-22, 16:17
RE: Problem with certificates - mcb30 - 2014-07-22 16:36
RE: Problem with certificates - welty - 2014-07-23, 08:03
RE: Problem with certificates - welty - 2014-07-23, 13:12
RE: Problem with certificates - mcb30 - 2014-07-28, 13:21



User(s) browsing this thread: 1 Guest(s)