Client Certificate

[simplyworks]

Hello,

I created a client required certificate to protect the Intranet folder on the web site, so the employees do not need to remember a password to access the intranet from home. They just install the certificate. This is the last piece I needs to move to the new server. (Fedora Core 5 with ISPconfig)

The problem is, I created a folder call "intranet" in /root/ispconfig/openssl/ssl/
I then install my cacert.pem and made the change in the apache config file to include the webapp.d file.

This file contains the folder directive to require the client certificate
<directory "/xxx/xxx/xxx/intranet">
SSLRequireSSL
SSLVerifyClient require
SSLCAcertificateFile /root/ispconfig/openssl/ssl/intranet
</directory>

When I restart ispconfig, I get an error stating I can not put the ssl in this location.

So, I tried /etc/ssl/intranet and got the same result.

Where do I need to install this cacert.pem in the folder stucture?

thanks,
Ja

[till]

Is your intranet folder on the ISPConfig webserver on port 81 or on your "normal" webserver port 81 / 443 ?

[simplyworks]

The folder in the normal port 80 / 443. The folder path is /home/www/web4/web/intranet

I firewall port 81 from outside our network.

The employees just go to www.mydomain.com/intranet

thanks,
Ja

[till]

Have you tried to put the SSL cert i file in the directory /home/www/web4/ssl/?

if thsi:

<directory "/xxx/xxx/xxx/intranet">
SSLRequireSSL
SSLVerifyClient require
SSLCAcertificateFile /root/ispconfig/openssl/ssl/intranet
</directory>

must be included in the vhost, you can copy it in the apache directives window of the ISPConfig website, then ISPConfig will add it to the vhost for you.