Skip to content

Instantly share code, notes, and snippets.

@vicneanschi
Last active July 7, 2016 01:16
Show Gist options
  • Save vicneanschi/66fdce533f39f9454ce07fb052e8bd9d to your computer and use it in GitHub Desktop.
Save vicneanschi/66fdce533f39f9454ce07fb052e8bd9d to your computer and use it in GitHub Desktop.
apache
If you enable ssl in apache, you can verify a client certificate.
If so apache will create a environment variable for you with the name 'SSL_CLIENT_VERIFY' with values 'NONE, SUCCESS, GENEROUS or FAILED:reason'.
See https://httpd.apache.org/docs/2.0/mod/mod_ssl.html
NONE: client has no cert
SUCCESS = cert is valid
GENEROUS = says only that some kind of certificate was sent at all
FAILED:reason = auth with the cert failed
SUCCESS is what you should look for
# get apache version
apachectl -V
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment