I've set up Apache2 to make use of Client Certificate AUthentication using:
It really works, I'm able to access my website having a valid Client Certificate. However, when customers connect with it without getting a ClientCertificate installed, they obtain a confusing error in the browser.
(Chrome states 'ERR_SSL_PROTOCOL_ERROR', Opera states 'ssl_error_handshake_failure_alert', Ie only states 'Internet Explorer cannot display the Webpage'.
I wish to show the customers a custom ErrorDocument once they attempt to access with no valid Client Certificate.
However , the website does not return a http error code, but aborts the request, and so i can't use Apaches' 'ErrorDocument'.
last a part of ssl_error_log is:
[Wed Aug 31 11:11:57 2011] [info] [client 192.168.2.156] SSL library error 1 in handshake (server url:443) [Wed Aug 31 11:11:57 2011] [info] SSL Library Error: 336105671 error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate No CAs known to server for verification? [Wed Aug 31 11:11:57 2011] [info] [client 192.168.2.156] Connection closed to child 1 with abortive shutdown (server url:443)
How do you return a legitimate ErrorDocument with this?