[pubcookie-users] virtual host support
Jim Fox
fox at washington.edu
Tue Jul 13 15:58:50 PDT 2004
Are you contacting the virtual server with http and
with https on return from pubcookie? If so you need to make sure
the alternate pubcookie config is included in the virtual server
sections for both 80 and 443 (http and https).
Jim
On Tue, 13 Jul 2004, John-Paul Robinson wrote:
> Date: Tue, 13 Jul 2004 17:51:14 -0500 (CDT)
> From: John-Paul Robinson <jpr at uab.edu>
> To: pubcookie-users at u.washington.edu
> Subject: [pubcookie-users] virtual host support
>
> Hi,
>
> I'm trying to figure out how to configure a virtual host environment for
> pubcookie.
>
> I have to virtual hosts in my apache conf for ssl, each running on a
> distinct port. Each virtual host definition has its own SSL cert/key.
> I was able to assign a key with keyclient for the virtual host using the
> command
>
> ./keyclient -c /vhost.crt -k /vhost.key -H vhost.example.org
>
> I had to use the -H since otherwise it wants to creat a key for for
> default host.
>
> My question is where to place the Pubcookie directives in the config file.
> I've tried placing them in just the virtualhost definitions and not in the
> main section but then apache won't start. So, I've left the default
> config (for the real host) in the main section and am trying to override
> the values for the vhost pubcookie dirctives in the vhost's section.
>
> When I do an authnetication, I get redirected to the login server and it
> accepts my login and directs my back to the originating page. The client
> browser passes the granting cookie along but the originating apache server
> can't verify the signature on the cookie.
>
> Is there something special that needs to be done for vhost support? Can
> the pubcookie directives override each other (as I'm assuming).
>
> Thanks for any hints,
>
> ~jpr
>
> _______________________________________________
> pubcookie-users mailing list
> pubcookie-users at u.washington.edu
> http://mailman.u.washington.edu/mailman/listinfo/pubcookie-users
>
More information about the pubcookie-users
mailing list