[13439] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Maybe It's Snake Oil All the Way Down

daemon@ATHENA.MIT.EDU (Rich Salz)
Tue Jun 3 21:48:48 2003

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Tue, 3 Jun 2003 19:49:34 -0400 (EDT)
From: Rich Salz <rsalz@datapower.com>
To: "James A. Donald" <jamesd@echeque.com>
Cc: "cryptography@metzdowd.com" <cryptography@metzdowd.com>,
	"cypherpunks@lne.com" <cypherpunks@lne.com>
In-Reply-To: <3EDCB916.14077.15D755CF@localhost>

> I never figured out how to use a certificate to authenticate a
> client to a web server, how to make a web form available to one
> client and not another.  Where do I start?

You must not have looked very hard. :)

I would start by taking Apache, openssl, and the mod_ssl package.
For example, at
    http://www.modssl.org/docs/2.8/ssl_howto.html#ToC6
we see the question "How can I authenticate clients based on
certificates when I know all my clients?" and it's answer.
Similar questions are also answered.
        /r$

--
Rich Salz                     Chief Security Architect
DataPower Technology          http://www.datapower.com
XS40 XML Security Gateway     http://www.datapower.com/products/xs40.html


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post