Description of problem: Due to the fact that Openshift terminates SSL connections at the node level and not at the gear level, SSL mutual authentication is impossible without additional user level controls to the node level Apache VirtualHost. Users need the ability to install CA certificates so that *clients* can be authenticated. In an Apache proxy this is accomplished via the SSLCACertificateFile mod_ssl setting[1]. This bug requests that the 'SSL Certificate' section of the administrator console be enhanced such that CA certificates can be uploaded for a particular gear. [1] http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslcacertificatefile Version-Release number of selected component (if applicable): 1.2 and 2.0 How reproducible: Always Expected results: Users have the ability to make the necessary settings for SSL mutual auth. Additional info: BZ1038853
Expect that this will be rolled into any client cert verification implementation. Consolidating into one RFE. *** This bug has been marked as a duplicate of bug 1038853 ***