Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: SSLCACertificateFile per Directory or Location |
|
| Author |
|
calisuni
Joined: 15 Sep 2014
Posts: 1
|
 Posted: Mon 15 Sep '14 20:06 Post subject: SSLCACertificateFile per Directory or Location |
 |
|
I understand that Apache documentation says that the SSLCACertificateFile directive is only valid in "server config" and "virtual host," but maybe someone can help me out with suggestions or an equivalent.
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcacertificatefile
I would like to use a different CA bundle per-directory or location. Reason being is one directory is more strict than the other.
Ideally the setup would be as follows (although I know it's prohibited):
| Code: | <VirtualHost *:443>
SSLEngine On
SSLVerifyClient require
SSLVerifyDepth 5
(Other SSL Stuff)
<Directory /home/mydirectory/securedirectory/>
SSLCACertificateFile /etc/apache2/ssl/certs/cas_secure.pem
</Directory>
<Directory /home/mydirectory/moresecuredirectory/>
SSLCACertificateFile /etc/apache2/ssl/certs/cas_more_secure.pem
</Directory>
</VirtualHost> |
Have any ideas? Thanks! |
|
| Back to top |
|
James Blond
Moderator
Joined: 19 Jan 2006
Posts: 7294
Location: Germany, Next to Hamburg
|
| Posted: Tue 16 Sep '14 18:56 Post subject: |
|
|
| It is not possible to do that, cause the handling of the encryption is before the actual connection |
|
| Back to top |
|
|
|
|
|
|
