Re: commit-email.pl and client certificates

On Jan 26, 2005, at 1:10 PM, Ben Collins-Sussman wrote:

> My guess is that you either want to
>
> a) 'Require valid-user', so that the users not only need a
> certificate, but need to login to apache with a password as well,
> using a typical htpasswd user db.
>
> or
>
> b) Try using the SSL "FakeBasicAuth" directive, which I believe
> copies the certificate CN into the basic-auth header of the http
> request.

Ben said "or," but I think you probably want "and": "Require
valid-user", so the challenge is always made and "FakeBasicAuth" so
that the basic-auth header is filled in with the full CN.

-Travis

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Wed Jan 26 21:23:28 2005