![Apache:无法对具有服务器级限制的 SSLVerifyClient 做出例外](https://linux22.com/image/789032/Apache%EF%BC%9A%E6%97%A0%E6%B3%95%E5%AF%B9%E5%85%B7%E6%9C%89%E6%9C%8D%E5%8A%A1%E5%99%A8%E7%BA%A7%E9%99%90%E5%88%B6%E7%9A%84%20SSLVerifyClient%20%E5%81%9A%E5%87%BA%E4%BE%8B%E5%A4%96.png)
当 SSLVerifyCLient 处于服务器级别时,我无法对其进行例外处理:
SSLVerifyClient require
SSLVerifyDepth 2
RequestHeader set SSL_CLIENT_VERIFY ""
<Location />
<If "-R '10.128.119.45/32'">
SSLVerifyClient none
</If>
SSLOptions +StdEnvVars ExportCertData OptRenegotiate
RequestHeader set SSL_CLIENT_S_DN_CN "%{SSL_CLIENT_S_DN_CN}s"
RequestHeader set SSL_CLIENT_I_DN_CN "%{SSL_CLIENT_I_DN_CN}s"
RequestHeader set SSL_CLIENT_CERT "%{SSL_CLIENT_CERT}s"
RequestHeader set SSL_CLIENT_VERIFY "%{SSL_CLIENT_VERIFY}s"
Require expr %{SSL_CLIENT_I_DN_CN} == 'Example Users Authentication' && ( %{SSL_CLIENT_S_DN_CN} == "user1" || %{SSL_CLIENT_S_DN_CN} == "user55" || %{SSL_CLIENT_S_DN_CN} == "user2" || %{SSL_CLIENT_S_DN_CN} == "user21575" || %{SSL_CLIENT_S_DN_CN} == "user3" || %{SSL_CLIENT_S_DN_CN} == "user4")
</Location>
异常被完全忽略:
curl:(35)NSS:未找到客户端证书(未指定昵称)
我想将“SSLVerifyClient 要求”保留在服务器级别,否则它会产生如下消息:
AH02261:重新协商握手失败
我尝试过:
<If "-R '10.128.119.45/32'">
SSLVerifyClient none
</If>
在位置之外没有运气......
我是否遗漏了什么?