I've made a self signed server certificate, and a server signed client
certificate using openssl (followed instructions from www.apache-ssl.org),
and then set SSLVerifyClient require, and SSLVerifiDepht 2.
Which should allow only known client certificates, signed by the server,
access to the server.
... But :( It dosen't work.... unknown certificates are still allowed
access.
Any suggestions???
I'm pretty new on Linux, but i followed the detailed instructions on
Apaches/mod_ssl homepages.
Maybe i'ts not running proberly, any ideas as to how i determine if the
installation is correctly made???
Any help are welcome
Regards Ruben Tandrup