Bug 21167

Summary: SSLVerifyClient directive in location make posting with perl cgi script impossible
Product: Apache httpd-2 Reporter: Jim Richardson <jimrich>
Component: mod_sslAssignee: Apache HTTPD Bugs Mailing List <bugs>
Status: RESOLVED DUPLICATE    
Severity: critical    
Priority: P3    
Version: 2.0.40   
Target Milestone: ---   
Hardware: Other   
OS: Linux   

Description Jim Richardson 2003-06-29 01:21:23 UTC
Begin Configuration --------------------------
<VirtualHost 192.168.2.201:443>
  ServerAdmin webmaster@grantis.net
  DocumentRoot /home/grantis
  ServerName www.grantis.net:443
  ErrorLog /home/grantis/logs/ssl_error_log
  CustomLog /home/grantis/logs/ssl_access_log common
  ScriptAlias /cgi-bin/ /home/grantis/cgi-bin/
    SSLEngine on
    SSLCertificateFile /home/grantis/ssl.crt/grantis.crt
    SSLCertificateKeyFile /home/grantis/ssl.key/grantis_public.key
    SSLCertificateChainFile /etc/grantisCA/public/grantisca_public.crt
    SSLCARevocationFile /etc/grantisCA/crl/grantisca.crl
    SSLCACertificateFile /etc/grantisCA/grantisca.crt
    <Location /cgi-bin/bypass>
         SSLVerifyClient require
         SSLVerifyDepth 1
         SSLOptions +OptRenegotiate
    </Location>
</VirtualHost>
End Configuration --------------------------

With properly generated CA/Server/Client certificates POSTING is impossible. 
You receive the follow error:

Method not allowed!
The POST method is not allowed for the requested URL. 
If you think this is a server error, please contact the webmaster 
Error 405
www.grantis.net 
Sat 28 Jun 2003 08:10:59 PM CDT 
Apache/2.0.40 (Red Hat Linux)
Comment 1 Joe Orton 2004-05-27 10:40:06 UTC

*** This bug has been marked as a duplicate of 12355 ***