Ssl – AH01896: Unable to determine list of acceptable CA certificates for client authentication in Apache v2.4 SSLCACertificatePath directive

apache-2.4mod-sslsslssl-certificate

I am using Apache v2.4

In ssl.conf file I am using SSLCACertificatePath directive with parameter like /var/dat/certificates/ssl.intermediate where ssl.intermediate is an empty directory with following permissions:

drwxr-xr-x  2 root   root 4096 Oct 23 23:10 ssl.intermediate

Now when I restart apache I get the following error in ssl error log:

[Thu Oct 23 23:11:08.706227 2014] [ssl:info] [pid 17421] AH02200:
Loading certificate & private key of SSL-aware server
'somehost.com:443'

[Thu Oct 23 23:11:08.706726 2014] [ssl:info] [pid 17421] AH01914:
Configuring server somehost.com:443 for SSL protocol

[Thu Oct 23 23:11:08.706831 2014] [ssl:emerg] [pid 17421] AH01896:
Unable to determine list of acceptable CA certificates for client
authentication

Thanks in advance

Best Answer

Not to state the obvious, but if you're not accepting client certificates (otherwise that directory would not be empty, right?), why don't you simply remove the offending directive from your config.

Related Topic