如何使php应用程序需要智能卡身份验证

发布于 2024-08-13 04:33:56 字数 290 浏览 5 评论 0原文

当 php 文件在 apache conf 中使用 SSLVerifyClient 保护时，我可以使浏览器强制使用智能卡（例如 ID 卡）进行身份验证。

现在我需要显示index.php，通常不需要智能卡身份验证，有时同一页面必须经过用户身份验证。

doStuff();
if ($needed==1)
  authenticateUser();
doMoreStuff();

authenticateUser() 必须包含什么内容，以便调用它会导致浏览器询问智能卡 PIN 码？

原文

I can make browser to force authentication with smart card eg ID-card when php file is protected with SSLVerifyClient in apache conf.

Now i need to display index.php usually without requiring smart card authentication and sometimes this same page must get user authenticated.

doStuff();
if ($needed==1)
  authenticateUser();
doMoreStuff();

What must authenticateUser() contain so that calling it causes browser to ask smart card pin code?

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

白昼 2024-08-20 04:33:56

你把这些东西混合了一点点。
authenticateUser(); 在服务器上运行，而身份验证发生在客户端上。您不能在运行用于客户端身份验证的 PHP 脚本的过程中停止，然后继续运行 PHP 脚本。

作为问题的解决方案，这可能适用于您的情况：

if(authenticationNeeded)
{
   // redirect to a page that requires authentication that does what index was supposed to do.
   redirect('index_ssl.php');
}

通过使用 .htaccess，您可以仅为某些目录/文件定义 SSLVerifyClient require。
关键点是：您的 Web 服务器（在本例中为 Apache）需要客户端证书才能授予对您指定 SSLVerifyClient require 的任何目录/文件的访问权限。

结论是，没有办法做你想做的事。您只能拥有需要或不需要客户端证书的文件/目录。无法在 PHP 文件中间停止以请求客户端证书，但您可以重定向到需要客户端证书的文件。

You're mixing the things a tiny bit.
authenticateUser(); runs on the server, while the authentication occurres on the client. You can't stop in the middle of running a PHP script for a client authentication and then continue running the PHP script.

As a solution to your question, this might work in your case:

if(authenticationNeeded)
{
   // redirect to a page that requires authentication that does what index was supposed to do.
   redirect('index_ssl.php');
}

By using .htaccess you can define SSLVerifyClient require only for some of the directories/files.
The key point is: your web server(Apache in this case) requires a client certificate in order to grant access to any directories/files for which you specify SSLVerifyClient require.

In conclusion, there is no way to do what you want. You can only have files/directories that either require or don't require a client certificate. Tthere is no way to stop in the middle of a PHP file in order to require a client certificate, but you could redirect to one that requires one.

回复收藏 0 原文

~没有更多了~