Jump to content

cezihcp

Members
  • Posts

    12
  • Joined

  • Last visited

cezihcp's Achievements

Newbie

Newbie (1/14)

0

Reputation

  1. Thank you, everything works now.
  2. That's interesting... I always close them post query... Yes, I would appreciate if you closed them. UPDATE: just checked and I had a script with a rather big if/else tree and I neglected to foresee that if one if failed that the connection wouldn't be close. It's fixed now, sorry for the bother.
  3. Hi again, I'm trying to connect to a database remotely via vb.net and have setup remote access and a new user for the database(one which I have not yet used to connect to the database) and I'm getting the error that the user has more active connections than the allowed max_user_connections. The weirder thing is than when i check the process list the named user cezihred_euput isn't even listed, just my cpanel username twice as the user.
  4. Really? Nobody? Interesting. Well, I really do thank you for your time and effort and for being so nice. I've more or less done the authentication and it does work except on chrome but that's not a big deal, I'll just use firefox. I'll head off and start coding the rest of my site now. Again, thanks a bunch!
  5. Thanks again, extremely appreciative of you help and effort, everything is working and I'm about to setup the authentication. Never could have done it without you
  6. Ok, I saved the instructions and once again thank you, you're the best ! also I sent the pm for the 2 client certs thanks a bunch!
  7. Alright, I'm sure that would be fine for now as I don't expect many users so I'll pm you the details, but would it be possible to setup a script or something along the lines of that?
  8. Thank you, it does work! Could you please give some info on how you generated the certificate so I could generate my own certificates with the relevant client data.
  9. I understand, however does this happen even though it's set to optional_no_ca meaning that the server should not require any of the browsers certificates to be signed by a valid CA. I also tried to add my own CA cert via SSLCACertificateFile and SSLCertificateFile but I get the corresponding errors that: Your SSL library does not have support for per-directory CA. However, I am very grateful for your invested time and I really do appreciate it.
  10. I created the client certificate via openssl.
  11. Hello everyone I have been trying to implement client certificate authentication for almost two days now with no success. The main problem I'm facing is the fact that I cannot get the browser to request the certificate. I have the SSLVerifyClient set to optional_no_ca because If I were to use a CA I would have to add an additional SSLCACertificateFile witch causes a "Your SSL library does not have support for per-directory CA" error and if i try to defin a SSLCADNRequestFile it notifies me that "SSLCADNRequestFile is not allowed here" I have setup SSL with a certificate from Let's encrypt and it works, also I am setup on Tommy .My .htaccess file in public_html is defined as so: RewriteEngine OnRewriteCond %{HTTPS} !=onRewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L] SSLVerifyClient optional_no_ca SSLVerifyDepth 1 SSLOptions +StdEnvVars I've setup an index file with the following php function: <?php function hasValidCert() { if (!isset($_SERVER['SSL_CLIENT_M_SERIAL']) || !isset($_SERVER['SSL_CLIENT_V_END']) || !isset($_SERVER['SSL_CLIENT_VERIFY']) || $_SERVER['SSL_CLIENT_VERIFY'] !== 'SUCCESS' || !isset($_SERVER['SSL_CLIENT_I_DN']) ) { return false; } if ($_SERVER['SSL_CLIENT_V_REMAIN'] <= 0) { return false; } return true; }; if (hasValidCert()){ echo 'Pass.'; }else{ echo 'Fail.'; } and tried loading the page in Chrome, Firefox and Internet Explorer neither of which have asked me to provide a certificate (i have 2 client certificates installed, one that is self-signed and the other signed with a CA certificate made with openssl) Could someone please point out weather I'm doing something wrong or if it's even possible to do this on heliohost? Kriss
×
×
  • Create New...