In addition to the standard Apache directives needed to enable SSL, you'll need a few more before the Apache modules work as they do on scripts. Add the following directives to each vhost that will be using SSL client-side certificate authentication:
- SSLCACertificateFile /etc/ssl/clientCAs.pem
+ SSLCACertificateFile /etc/ssl/certs/mitCAclient.pem
<Location />
AuthSSLCertVar SSL_CLIENT_S_DN_Email
AuthSSLCertStripSuffix "@MIT.EDU"