I would like to configure an Apache (v2.2) web server to only accept traffic from a client with a particular (valid) certificate. Not just ANY valid certificate (sslclientauth required). Not just ANY valid client certificate that happens to have xyz DN, etc. But a particular certificate. It must be THAT client with THAT certificate, and the certificate may or may not be self-signed.
The only possible solution I can think of so far is to use SSLREQUIRE with the SSL_CLIENT_CERT variable and hardcoding the pem cert into the conf file.
Is there a more straightforward way to make a web server only accept traffic from a client that presents a specific certificate?
TIA
