Re: Apache http ssl certificate - export

Well... in my Apache server config...

When I changed...

sslClientAuth from optional to required, it only allows me to connect with the certificate applied (.pfx file)

Why is that?

Btw, this certificate generated by the DCM contains both the cert and a key. As well as a password. It’s a .pfx file.

certificate on steroids?

Jay

On Apr 28, 2020, at 6:02 PM, Jack Woehr <jwoehr@xxxxxxxxxxxxxxxxxxxxxxxx> wrote:

On Tue, Apr 28, 2020 at 3:51 PM Jay Vaughn <jeffersonvaughn@xxxxxxxxx>
wrote:

you guys are a gift...

awwwwwwwwwww .... :)

which ONLY allows those I give this certificate to to pass into my apache
http server...
and in my eyes, this creates a form of authentication/authorization... no?

NO. The server cert is ONLY an ASSERTION OF IDENTITY. If a bad player wants
to IGNORE it or ACCEPT IT WITHOUT PROOF they are FREE TO DO SO.

*No server protection at all is provided by the server cert!*

It's a way of protecting the CLIENT and assuring them that they are really
talking to the system they think they have connected to!

--
Jack Woehr
Absolute Performance, Inc.
12303 Airport Way, Suite 100
Broomfield, CO 80021

NON-DISCLOSURE NOTICE: This communication including any and all
attachments is for the intended recipient(s) only and may contain
confidential and privileged information. If you are not the intended
recipient of this communication, any disclosure, copying further
distribution or use of this communication is prohibited. If you received
this communication in error, please contact the sender and delete/destroy
all copies of this communication immediately.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com