[racket-dev] possible bug in openssl/mzssl

From: Sergey Pinaev (pinaev at jet.msk.su)
Date: Thu Mar 1 00:31:40 EST 2012

On Wed, 29 Feb 2012 09:20:54 -0700
Matthew Flatt <mflatt at cs.utah.edu> wrote:

> Neil and Timur: Thanks for detailed information about the problem.
> So far, I haven't managed to replicate the problem on my machine. Do
> you have any hints on how to configure Apache to trigger the problem
> or a server that I might try?

you must access document in location, where SSLVerifyClient required:

  <Location /dir/>
    SSLVerifyClient require
    SSLVerifyDepth 10

and do "GET /dir/some.file HTTP/1.0" to cause apache do connection

Sergey Pinaev <pinaev at jet.msk.su>

Posted on the dev mailing list.