S
S
Sergey2011-05-10 17:05:14
Apache HTTP Server
Sergey, 2011-05-10 17:05:14

SSL authentication (apache) similar to ssh (authorized_keys)?

Hello.
I am tormented by the question, is it possible to implement user authentication on a web server using certificates, but without organizing a CA? Those. as in the case of ~.ssh/authorized_keys2, we add the user's certificate to some analogue on Apache and authenticate it, i.e. some local database of "trusted certificates"?
I know it's conceptually wrong and breaks the coherent PKI architecture, don't ask me why I need it. We need an analogue of authorized_keys, but for apache. Is there one, friends?

Answer the question

In order to leave comments, you need to log in

3 answer(s)
G
garrych, 2011-05-12
@garrych

Not suitable for Kerberos?
Here is a good description

G
garrych, 2011-05-12
@garrych

then through SSLVerifyClient requireand SSLVerifyDepth 0
a self-signed certificates from the server
from here

S
Sergey Savostin, 2011-05-29
@savostin

Haven't found the answer yet?
Here about IIS, but there is a link in the comments to an article about Apache.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question