How do I require clients to have a certificate from a trusted Certificate Authority (CA)?
Uncomment or add following directives in /opt/hpws/apache/conf/ssl.conf SSLCACertificatePath /opt/hpws/apache/conf/ssl.crt SSLCACertificateFile /opt/hpws/apache/conf/ssl.crt/ca-bundle.crt SSLVerifyClient require SSLVerifyDepth 10 Now only certificates signed by a CA whose certificates is in Apache’s ca.bundle.crt file will be accepted. All others will be rejected.