source: mod_gnutls/test/tests/18_client_verification_wrong_cert/apache.conf @ eea8a16

asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
Last change on this file since eea8a16 was eea8a16, checked in by Thomas Klute <thomas2.klute@…>, 8 years ago

New test case: TLS client auth with invalid certificate

Commit 5a8a32bbfb8a83fe6358c5c31c443325a7775fc2 ("TLS Client auth: Check
server verify mode if unset for dir") fixed an issue where mod_gnutls
ignored the results of client certificate verification if there was no
directory specific verification policy. The new test case checks if
mod_gnutls properly rejects requests using invalid certificates if
client auth is required.

  • Property mode set to 100644
File size: 334 bytes
Line 
1Include ${PWD}/../../base_apache.conf
2
3GnuTLSCache dbm cache/gnutls_cache
4
5<VirtualHost ${TEST_IP}:${TEST_PORT}>
6 ServerName ${TEST_HOST}
7 GnuTLSEnable On
8 GnuTLSCertificateFile server/x509.pem
9 GnuTLSKeyFile server/secret.key
10 GnuTLSPriorities NORMAL
11 GnuTLSClientCAFile authority/x509.pem
12 GnuTLSClientVerify require
13</VirtualHost>
Note: See TracBrowser for help on using the repository browser.