SSLCACertificatePath: directory does not exist

[Denis4l]

I did answer somewhere, and it is not usede anymore into the config files.

[Denis4l]

Ha ? I don't know ...
@jvanasco say it can be the SSLCACertificatePath but it is not used anymore.
Then, looking for any parameter which might request for a client certificate is not easy. I had tried to read https://www.openssl.org/docs/manmaster/man3/ and that https://www.feistyduck.com/library/openssl-cookbook/online/openssl-command-line/getting-started.html .... Where can we find something more... friendly to read, or at least more easy to find out which parameter can be the wrong one and how to configure it ?

This one SSLVerifyClient ? I had found a SSL_VERIFY_CLIENT_ONCE at this page https://www.openssl.org/docs/manmaster/man3/SSL_verify_client_post_handshake.html but it is not exactly the same parameter. So what ?...

Finally I just commented out the lines

#SSLVerifyClient require
#SSLVerifyDepth 10

into ssl.conf but I don't understand what am I doing. Not satisfactory point.

And now it is toooooooo long to reply (my site).

[Osiris]

@Denis4l

Finally I just commented out the lines

#SSLVerifyClient require
#SSLVerifyDepth 10

into ssl.conf but I don't understand what am I doing.

Those two options are for client certificate authentication. If you don't want to do that, you don't need those two options.

You can read more about that in the Apache documentation, not OpenSSL.

[jvanasco]

@Osiris

Those two options are for client certificate authentication. If you don't want to do that, you don't need those two options.

Going beyond this comment:

If you do not completely understand what Client Certificate Authentication is, you do not want or need any of these options.

SSL Client Authentication and Verification is used in extremely limited situations.