RE: [squid-users] Trying too use user_cert acl with SQUID 2.5 + S SL patch

On Fri, 3 Sep 2004, Fauquet, Xavier wrote:

> Henrik,
>
>
> Here is the line for https_port :
> https_port 5000 cert=/usr:local/squid/etc:key.crt
> key=/usr:local/squid:etc:key.pem clientca=/usr/local/squid/etc/ca.crt

Ok (assuming : is really / ?)

> The subject of the certificate is something like : CN=surname.name
> E=surname.name@tot.com

Then you should be able to use

acl USER-ok CN surname.name

or

acl USER-ok E surname.name@tot.com

or

acl USER-OK DN CN=surname.name,E=surname.name@tot.com

DN or DistinguishedName is an exact match to the subject

Regards
Henrik
Received on Fri Sep 03 2004 - 09:16:53 MDT