Re: ssl client certificates

• From: Andrew Steets <steets@gmail.com>
• Date: Wed, 23 Feb 2005 08:08:53 -0600
• To: Vic Bancroft <bancroft@dlogic.org>
• Cc: www-lib@w3.org
• Message-ID: <5a96d6f10502230608170222ca@mail.gmail.com>

Hello Vic,

> Sounds interesting, have many servers adopted this mechanism for
> authenticating clients ?

Apache: http://httpd.apache.org/docs-2.0/ssl/ssl_howto.html#accesscontrol
Aolserver: http://www.panoptic.com/wiki/aolserver/166 (I think)
 
It seems that libwww HTSSL module is based very heavily on the sample
code distributed with openssl (check out openssl/apps/s_client.c &
s_cb.c).  That sample code has support for client certificates, so my
plan is mainly just to graft in the appropriate sections with a few
modifications.

-Andrew

Received on Wednesday, 23 February 2005 14:55:10 UTC