[Mono-dev] mod_mono and client certificates - no worky?

[Sebastien Pouliot]

Hello Jay,

On Mon, 2008-03-10 at 14:06 -0700, Jay Miller wrote:
> On Mon, Mar 10, 2008 at 1:51 PM, Sebastien Pouliot
> <sebastien.pouliot at gmail.com> wrote:
> >  It's been quite a while since I last looked at this but I think client
> >  certificates are not supported by mod_mono (but only XSP). At least I
> >  don't recall testing them...
> 
> At first I thought this might be the problem too, but in the 1.1.17
> changelog I found the following:
> 
> ---
> 
> mod_mono
> 
> Added support for X.509 client certificates. It's now possible to use
> System.Web.HttpClientCertificate with Apache. Certificate validation
> can be done by Apache, Mono or both (default). [Hubert Fongarnand,
> Sebastien Pouliot]

You're right I found this
http://pages.infinit.net/ctech/20060803-0222.html
which pointed to this
https://bugzilla.novell.com/show_bug.cgi?id=MONO78740
where the last comments explains why I don't recall testing it ;-|

Now it's been too long, and too many updates, to recall what my original
Apache configuration was... but I pretty sure I copy-pasted it from
somewhere. Also at the time I doubt I was using apache 2.2.x

> ---
> 
> which seems to indicate that support does exist..?
> 
> I considered looking through the mod_mono code earlier, but the fact
> that the CERT_FLAGS variable was not even set made me think it was
> actually Apache that wasn't sending the appropriate info to mod_mono
> rather than mod_mono not supporting the interpretation of those
> variables.  Perhaps mod_mono isn't actually requesting that info from
> Apache?
> 
> As is probably obvious, I have no idea what I'm talking about.  Any
> suggestions on where to start would be most welcome, heh.
>