
Cer tificate-Based Access Controls
SSLVerifyClient
SSLVerifyClient level
Contexts: GV Compatibility: mod_ssl 2.0, Apache-SSL, Stronghold
Specifies the level of certificate verification to be performed. Note that
mod_ssl uses symbolic names, while Apache-SSL and Stronghold use
numeric levels. Values for level are listed in the following table.
Value iption
none (0) No client certificate required.
optional (1) Client may present a valid certificate.
require (2) Client must present a valid certificate.
Descr
SSLClientAuth
SSLClientAuth { none|optional|required }
Contexts: GV Compatibility: IHS
Specifies the level of certificate verification to be performed.
SSLVerifyDepth
SSLVerifyDepth number
Contexts: GV Compatibility: mod_ssl 2.0, Apache-SSL, Stronghold
Default: 0
Specifies the number of CA certificates in the chain of certificates to
be followed until a CA certificate is found that is held in the CA cer-
tificate path or file. A value of 0 means that only self-signed certifi-
cates are acceptable, while a value of 1 means that certificates must
be signed by a CA that is directly known to the server.
90 Apache Pocket Reference