3 ms·
The last time I tried to get apache to do authenticate with client certs it was an absolute nightmare.
by dfc 15y ago
The last time I tried to get apache to do authenticate with client certs it was an absolute nightmare.
- eCa 15y agoMy experience as well. I tried to implement client side certificates for an internal system (changing computers/browsers/ugly UI/etc not an issue), but couldn't quite get it to work. And in that setting not worth the time compared to Basic Auth.
- spc476 15y agoI didn't find it being an absolute nightmare, but it wasn't trivial either. Here's the configuration that works for me: http://boston.conman.org/2009/03/02/siteconf.txt http://boston.conman.org/2009/03/02/siteconf.txt I also found that the Firefox Convergence add-on (which itself is a neat concept) breaks client certificates (which I keep forgetting, so when I hit the private areas of my secure server, I keep getting denied until I remember to disable Convergence).