Exeptions in Client authentication required on specific URL's

How to make an exeption on SSL client authentication a requested URL

[chopper]

Hi,

Could some one help me with the following case:

For de following URL, for example: htpps://www.example.nl/website is a Clientcertificate required.

We want to make an exeption on the following URL:
[exaple.nl...] where no clientcertificate is required.

Of course there is a SSL connection for this URL stil required.

The requested URL is routed on base of DNS (10.5.121.77 is replyed for [example.nl),...]
so we have configured the following line's in Apache 1.3 WebServer:

<VirtualHost 10.5.121.77:443>
ServerName webserver
DocumentRoot "C:/WWW"
SSLEnable
Keyfile "c:\certificates\certificates.kdb"
SSLStashfile "c:\certficates.sth"

SSLClientAuth required
SSLClientAuthRequire IssuerCommonName ="<Company>"
</VirtualHost>

This configuration is tested and seems to work.

The probleem is now how to make an exeption voor the other URL in the same domain?

I could think it has to do with a redirect option, but wil this work with an SSL connection?.

Thanks,

Chopper.

[sitz]

You don't say which version of Apache you're using; I've not tried this myself (and I don't have access to an environment where I could easily test this), but you *may* be able to make use of mod_ssl's SSLRequire directive:
[modssl.org ]

I'd be interested in how that works for you; keep us posted. =)