Re: [Lug-bg] SOLVED:Apache Web Logon с Електронен Подпис

[Dean Stoeff <dean@xxxxxxxxxxxx>]

Даам, понякога 2 дена проби спестяват 2 минути четене на документацията :)

ето какво пише за тази директива:
SSLCACertificatePath

#   Certificate Authority (CA):
#   Set the CA certificate verification path where to find CA
#   certificates for client authentication or alternatively one
#   huge file containing all of them (file must be PEM encoded)
#   Note: Inside SSLCACertificatePath you need hash symlinks
#         to point to the certificate files. Use the provided
#         Makefile to update the hash symlinks after changes.


До сега бях ползвал само едно CA и съответно SSLCACertificateFile и по 
инерция когато добавих още CA-та
преминах към SSLCACertificatePath без да прочета, че иска да има "hash 
symlinks" голямо търсене падна и на въпросния Makefile, не че неможе на 
ръка да се направят, но ето го и него:

##
##  Makefile to keep the hash symlinks in SSLCACertificatePath up to date
##  Copyright (c) 1998-2001 Ralf S. Engelschall, All Rights Reserved.
##

SSL_PROGRAM=

update: clean
        -@ssl_program="$(SSL_PROGRAM)"; \
        if [ ".$$ssl_program" = . ]; then \
            for dir in . `echo $$PATH | sed -e 's/:/ /g'`; do \
                for program in openssl ssleay; do \
                    if [ -f "$$dir/$$program" ]; then \
                        if [ -x "$$dir/$$program" ]; then \
                            ssl_program="$$dir/$$program"; \
                                                break; \
                        fi; \
                    fi; \
                done; \
                if [ ".$$ssl_program" != . ]; then \
                                break; \
                fi; \
            done; \
        fi; \
        if [ ".$$ssl_program" = . ]; then \
            echo "Error: neither 'openssl' nor 'ssleay' program found" 
1>&2; \
            exit 1; \
        fi; \
        for file in *.crt; do \
            if [ ".`grep SKIPME $$file`" != . ]; then \
                echo dummy |\
                awk '{ printf("%-15s ... Skipped\n", file); }' \
                "file=$$file"; \
            else \
                n=0; \
                while [ 1 ]; do \
                    hash="`$$ssl_program x509 -noout -hash <$$file`"; \
                    if [ -r "$$hash.$$n" ]; then \
                        n=`expr $$n + 1`; \
                    else \
                        echo dummy |\
                        awk '{ printf("%-15s ... %s\n", file, hash); }' \
                        "file=$$file" "hash=$$hash.$$n"; \
                        ln -s $$file $$hash.$$n; \
                        break; \
                    fi; \
                done; \
            fi; \
        done

clean:
        -@rm -f [0-9a-fA-F]*.[0-9]*



_______________________________________________
Lug-bg mailing list
Lug-bg@xxxxxxxxxxxxxxxxxx
http://linux-bulgaria.org/mailman/listinfo/lug-bg