Lighttpd

'''lighttpd-1.4.13_ssl_client_verify_0.2.patch:'''

client validation is controlled with two new config options:

ssl.verify-peer (boolean, default = "disable")
ssl.verify-depth (short, default = 9)

If verification is turned on lighttpd disconnects all clients
which do not provide a valid client certificate.
Note: You will also need the CA file which provides the root
certificate for validation:

ssl.ca-file             = "/path/to/ca.crt" 

example SSL section in 'lighttpd.conf' looks like this:

ssl.engine              = "enable" 
ssl.use-sslv2           = "disable" 
ssl.pemfile             = "/etc/lighttpd/server.pem" 
ssl.ca-file             = "/etc/lighttpd/ca.crt" 
ssl.verify-peer         = "enable" 
ssl.verify-depth        = 1

Lars,

Will this patch set all of the environment variables that one would expect to see when using SSL client certificates?

Thanks,

Stan McFarland
sfmcfar@gmail.com

-- sfmcfar

Ported to trunk, enhanced and backported to 1.4.x: #1288

Thanks Lars for pointing me in the right direction. :D