Re: [Semanticscuttle-devel] Work on #3163623 started: SSL Client Certificates

[Christian W. <cw...@cw...>]

Hello all,


SSL Client certificate support is finished, apart from documentation.
It would be awesome if someone could test it. Basically you need to
setup HTTPS on your web server, register a client certificate in your
browser and visit your profile page to register the certificate with
your user profile. After that, you will be automatically logged into
SemanticScuttle.

I got my server and client certificate from CAcert.org and used the
following settings in apache:

    SSLEngine On
    SSLCertificateFile /etc/ssl/private/bm.bogo.cweiske.de-cacert.pem
    SSLCertificateKeyFile /etc/ssl/private/bm.bogo.cweiske.de.key

    SSLCACertificateFile /etc/ssl/private/cacert-1and3.crt

    #enable client certificate login
    SSLOptions +StdEnvVars
    SSLVerifyClient optional
    SSLVerifyDepth 1



-- 
Regards/Mit freundlichen Grüßen
Christian Weiske

-=≡ Geeking around in the name of science since 1982 ≡=-