Description of problem: To facilitate SSL mutual authentication, gears need the ability to control the verification depth as described in [1]. Without the ability this ability to control verification depth per-VirtualHost Apache will default to a depth of 1. This will not work for sites that have multiple intermediate CAs in their client certificate chain. Version-Release number of selected component (if applicable): All Expected results: Gears should be able to control the verification depth for their virtual host. Additional info: [1] http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslverifydepth
Expect that this will be rolled into any client cert verification implementation. Consolidating into one RFE. *** This bug has been marked as a duplicate of bug 1038853 ***