X-Git-Url: https://sipb.mit.edu/gitweb.cgi/wiki.git/blobdiff_plain/5710fa5b38c76debc34a97b36e986d31413087e8..e68c6a8be670ae2de7c36c447bc5caba67496d17:/doc/apache-client-certs.mdwn diff --git a/doc/apache-client-certs.mdwn b/doc/apache-client-certs.mdwn index 841e103..d4a0642 100644 --- a/doc/apache-client-certs.mdwn +++ b/doc/apache-client-certs.mdwn @@ -4,7 +4,7 @@ While it's certainly possible to configure client-side certificate authenticatio ## Installing the modules -If you're using Ubuntu, [Evan Broder](http://ebroder.net) has packaged the scripts.mit.edu modules for all current Ubuntu releases in a PPA. +If you're using Ubuntu, Evan Broder has packaged the scripts.mit.edu modules for all current Ubuntu releases in a PPA. The [PPA homepage](https://launchpad.net/~broder/+archive/scripts-http-mods) includes instructions on how to install the PPA on your system, but if you're on Ubuntu Karmic or later, you can just run: @@ -20,7 +20,7 @@ You'll also need a working AFS client and the Athena client certificate CA. Both In addition to the standard Apache directives needed to enable SSL, you'll need a few more before the Apache modules work as they do on scripts. Add the following directives to each vhost that will be using SSL client-side certificate authentication: - SSLCACertificateFile /etc/ssl/clientCAs.pem + SSLCACertificateFile /etc/ssl/certs/mitCAclient.pem AuthSSLCertVar SSL_CLIENT_S_DN_Email AuthSSLCertStripSuffix "@MIT.EDU"