IBM HTTP Server (SSL)-You don't have permission to access / on this server.

[contac...@gmail.com]

Hi,<br />
I have IBM HTTP Server V6.1 installed. I have enabled SSL &#38; created key files as well as self signed certificate. It prompts me to accept the certificate whenever I access the page. Here is snippet of mt 'httpd.conf' -<br />
&lt;VirtualHost *:443&gt;<br />
ServerName &lt;something&gt;<br />
SSLEnable<br />
SSLClientAuth <b>Required</b><br />
In this case I get the above mentioned error '403 Forbidden -You don't have permission to access / on this server.'<br />
Error logs are<br />
<a href="http://www-128.ibm.com/developerworks/forums/">warn</a> SSL0265W: Client did not supply a certificate.<br />
<br />
If I make SSLClientAuth <b>Optional</b>, I can see the HomePage with no error. I understand what these options mean. But I am not sure why my browser is not supplying the certificate....<br />
<br />
Thanks...

[Eric Covener]

The server tells your browser what Certificate Authorities it trusts. If
your client certificate isn't signed by any of them, your browser just
doesn't send any.

Add the cert for the issuer of your client cert to the IHS KeyFile

--
Eric Covener

[contac...@gmail.com]

Thanks...<br />
My problem was - I had created self signed certificate in key file. I had to extract that certificate &#38; import in browser as personal certificate. I had tried that first with .crl file that is create with .kdb file, but it does not work. I had to export it in .p12 format which browser recognized and imported successfully.