Page 1 of 1

SSL client certificate

PostPosted: 12. June 2017 09:57
by yn.coder@gmail.com
Hello!

Thank you for great software!

I have in trouble with SSL Client certficate configuration.

I've start XAMPP 3.2.2 on Windows 7, simple installation without any modifications (just only one - set SSL port to 8892, because 443 was busy)

I've use the server key and crt from installation, create the client key and csr with openssl ('xampp\apache\bin\openssl.exe'), register the csr in apache and got client crt (server copy is placed to 'xampp\apache\conf\demoCA\newcerts\01.pem').

Connection to https://localhost:8892 is working.

If I restrict some folder in httpd with '.htaccess' with 'SSLVerifyClient require' - connection is not work (it's right).

When I add client crt to browser - certificate was requested but connection fail with
Code: Select all
SSL_ERROR_UNKNOWN_CA_ALERT


May be I do not configure something?

Re: SSL client certificate

PostPosted: 12. June 2017 10:15
by yn.coder@gmail.com
I was try both with crt and P12 client certificate format - with same result 'SSL_ERROR_UNKNOWN_CA_ALERT'

In error.log I see

[Mon Jun 12 14:07:54.350127 2017] [ssl:error] [pid 6140:tid 1636] [client 127.0.0.1:58068] AH02261: Re-negotiation handshake failed
[Mon Jun 12 14:07:54.350127 2017] [ssl:error] [pid 6140:tid 1636] SSL Library Error: error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate -- No CAs known to server for verification?
[Mon Jun 12 14:08:39.809727 2017] [ssl:error] [pid 6140:tid 1636] [client ::1:58073] AH02039: Certificate Verification: Error (20): unable to get local issuer certificate
[Mon Jun 12 14:08:39.832728 2017] [ssl:error] [pid 6140:tid 1636] [client ::1:58073] AH02261: Re-negotiation handshake failed
[Mon Jun 12 14:08:39.832728 2017] [ssl:error] [pid 6140:tid 1636] SSL Library Error: error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed
[Mon Jun 12 14:08:45.645061 2017] [ssl:error] [pid 6140:tid 1636] [client ::1:58075] AH02039: Certificate Verification: Error (20): unable to get local issuer certificate
[Mon Jun 12 14:08:45.645061 2017] [ssl:error] [pid 6140:tid 1636] [client ::1:58075] AH02261: Re-negotiation handshake failed
[Mon Jun 12 14:08:45.645061 2017] [ssl:error] [pid 6140:tid 1636] SSL Library Error: error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed