BB Unix Network Monitor - Message
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: {bb} bbgen & https test
In <002101c48f29$a5c24560$2b01d59f@pcma13319new> "Marco Avvisano" <m.avvisano@mail.regione.toscana.it> writes:
>When i exec curl -ik from the command line it returme me these message:
>HTTP/1.1 404 Not found
>Server: Netscape-Enterprise/4.1
>Date: Tue, 31 Aug 2004 07:01:04 GMT
>Content-type: text/html
>Content-length: 142
>Content-type: text/html
>Connection: close
><HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>
><BODY><H1>Forbidden</H1>
>Your client is not allowed to access the requested object.
></BODY></HTML>
What a weird server - it uses a "404" (not found) status code, but
the error text indicates a permission problem, so it really should
have returned a 401 (unauthorized) status code.
>So, i think that the problem is that the page is not accessible without the
>certificate.
Do I understand correct - this server requires a *client* certificate
for authorization ? I.e. each user is given an individual certificate,
which the user installs on his workstation before he is allowed to
access the website ? "curl -ik -E /path/to/cert https://www.foo.com/";
works ?
In that case I'm afraid this is not (yet) possible. bbgen does not
support client-certificate authorization, only the simple HTTP "Basic"
authorization method.
The curl library which bbgen 2.x uses does support client certificates
with the "-E / --cert" option. But this is not used by bbgen.
Looking at the OpenSSL docs it should not be too hard to implement.
Would you be willing to test it for me ? I don't have a server that
requires client certificates for authorization, so it would be
difficult for me to test.
Henrik
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.
Home |
Main Index |
Thread Index