asynciodebian/masterdebian/stretch-backportsjessie-backportsmainproxy-ticketupstream
Last change
on this file since eea8a16 was
eea8a16,
checked in by Thomas Klute <thomas2.klute@…>, 8 years ago
|
New test case: TLS client auth with invalid certificate
Commit 5a8a32bbfb8a83fe6358c5c31c443325a7775fc2 ("TLS Client auth: Check
server verify mode if unset for dir") fixed an issue where mod_gnutls
ignored the results of client certificate verification if there was no
directory specific verification policy. The new test case checks if
mod_gnutls properly rejects requests using invalid certificates if
client auth is required.
|
-
Property mode set to
100644
|
File size:
334 bytes
|
Line | |
---|
1 | Include ${PWD}/../../base_apache.conf |
---|
2 | |
---|
3 | GnuTLSCache dbm cache/gnutls_cache |
---|
4 | |
---|
5 | <VirtualHost ${TEST_IP}:${TEST_PORT}> |
---|
6 | ServerName ${TEST_HOST} |
---|
7 | GnuTLSEnable On |
---|
8 | GnuTLSCertificateFile server/x509.pem |
---|
9 | GnuTLSKeyFile server/secret.key |
---|
10 | GnuTLSPriorities NORMAL |
---|
11 | GnuTLSClientCAFile authority/x509.pem |
---|
12 | GnuTLSClientVerify require |
---|
13 | </VirtualHost> |
---|
Note: See
TracBrowser
for help on using the repository browser.