Changes between Version 12 and Version 13 of TipAndDoc/ssl

Timestamp:

Nov 19, 2009 10:58:46 AM (15 years ago)

Author:

mitty

Comment:

--

TipAndDoc/ssl

@@ -101 +101 @@
  = misc =
  * [http://old.nabble.com/How-to-pass-a-Client-Certificate-through-a-Reverse-Proxy-td9368919.html Nabble - Apache HTTP Server - Users - How to pass a Client Certificate through a Reverse Proxy]
+{{{
+[warn] Proxy client certificate callback: (servername:443) downstream server wanted client certificate but none are configured
+}}}
    * > It seems as if the reverse proxy isn't passing through the client certificate from the browser. I realise that it is possible to setup the reverse proxy with a client certificate, but I need the client certificate to come from the client's browser. 
    * Yes, because a client can only send its certificate by using encrypted and SIGNED connection, and only the client can sign the certifikate so server can trust it. The proxy does not know the clients private key, otherwise the connection would not be secure (or not in the way most people know that).