Apache:無法對具有伺服器等級限制的 SSLVerifyClient 進行例外處理

Apache:無法對具有伺服器等級限制的 SSLVerifyClient 進行例外處理

當 SSLVerifyCLient 位於伺服器層級時,我不能例外:

SSLVerifyClient require
SSLVerifyDepth 2
RequestHeader set SSL_CLIENT_VERIFY ""
<Location />
<If "-R '10.128.119.45/32'">
  SSLVerifyClient none
</If>
  SSLOptions +StdEnvVars ExportCertData OptRenegotiate
  RequestHeader set SSL_CLIENT_S_DN_CN "%{SSL_CLIENT_S_DN_CN}s"
  RequestHeader set SSL_CLIENT_I_DN_CN "%{SSL_CLIENT_I_DN_CN}s"
  RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s"
  RequestHeader set SSL_CLIENT_VERIFY "%{SSL_CLIENT_VERIFY}s"
  Require expr %{SSL_CLIENT_I_DN_CN} ==  'Example Users Authentication' && ( %{SSL_CLIENT_S_DN_CN}  ==  "user1" ||  %{SSL_CLIENT_S_DN_CN}  ==  "user55"  ||  %{SSL_CLIENT_S_DN_CN}  ==  "user2" ||  %{SSL_CLIENT_S_DN_CN}  ==  "user21575"  ||  %{SSL_CLIENT_S_DN_CN}  ==  "user3" || %{SSL_CLIENT_S_DN_CN}  ==  "user4")
</Location>

異常被完全忽略:

捲曲:(35)NSS:找不到客戶端憑證(未指定暱稱)

我想將“SSLVerifyClient require”保留在伺服器級別,否則它會產生一些訊息,如下所示:

AH02261:重新協商握手失敗

我嘗試過:

<If "-R '10.128.119.45/32'">
      SSLVerifyClient none
    </If>

在位置之外沒有運氣...

我錯過了什麼嗎?

相關內容