diff --git a/docs/source/simplesamlphp-idp.xml b/docs/source/simplesamlphp-idp.xml index 337411ad25361cab29aad188c8ee7f83079f1acd..3e1feaef2b5bba0d2ef9c116a2759fcad71ed0df 100644 --- a/docs/source/simplesamlphp-idp.xml +++ b/docs/source/simplesamlphp-idp.xml @@ -7,7 +7,7 @@ <articleinfo> <date>2007-10-15</date> - <pubdate>Thu Mar 27 20:46:34 2008</pubdate> + <pubdate>Wed Apr 16 10:24:40 2008</pubdate> <author> <firstname>Andreas Åkre</firstname> @@ -120,6 +120,15 @@ LDAP.</para> </glossdef> </glossentry> + + <glossentry> + <glossterm>auth/login-tlsclient.php</glossterm> + + <glossdef> + <para>Authentication via client certificates. (using the apache + SSL module)</para> + </glossdef> + </glossentry> </glosslist></para> <section> @@ -158,6 +167,28 @@ </itemizedlist> </section> + <section> + <title>Configure the tlsclient authenticaiton module</title> + + <para>Configure apache like this:</para> + + <programlisting> SSLEngine On + SSLCertificateFile /etc/ssl/private/bridge.pem + SSLCertificateKeyFile /etc/ssl/private/bridge.key + SSLCertificateChainFile /etc/ssl/certs/sureserverEDU.pem + SSLOptions +StdEnvVars +ExportCertData + KeepAliveTimeout 60 + SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL + + SSLCACertificateFile "/etc/ssl/private/tlsclienttest-ca.crt" + SSLVerifyClient optional + SSLVerifyDepth  1</programlisting> + + <para>And, then configure the identity provider to use the + authentication module: + <filename>auth/login-tlsclient.php</filename>.</para> + </section> + <section> <title>Configuring the multi-LDAP authenticaiton module</title>