客户端证书选择
我有一个 https apache 服务器,需要客户端验证。但是,当有人浏览该网站时,需要从浏览器中安装的证书列表中选择正确的证书。我该怎么做才能成为我的网页的默认客户端证书(这样客户端就不需要选择证书)
I have a https apache server that needs client verification. But when somebody is browsing this site there is need to select proper cert from list of certificates installed in browsers. What can I do to become client cert default to my webpage (so clients do no need to select cert)
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
您的证书是否有效并由第三方根机构(如 Thawte、Verisign 等)签名?
Is your certificate valid and signed by a 3rd party root authority like
Thawte, Verisign
... etc?您无法从服务器控制提供哪个客户端证书 - 您只能指示您需要客户端证书 (SSLVerifyClient)。大多数浏览器允许用户将网站与个人客户端证书相关联。无法从服务器端操纵它。
You can't control from the server which client certificate is presented - you can only indicate that you expect a clientside certificate (SSLVerifyClient). Most browsers allow the user to associate websites with individual client certs. There is no way to manipulate this from the serverside.