[Pkg-openssl-devel] Bug#557261: Bug#557261: libssl0.9.8: Updating from version k-5 to k-6 breaks client auth with stunnel4

[Kurt Roeckx]

On Sun, Jan 10, 2010 at 11:48:15AM +0300, Vladimir Volovich wrote:
> "KR" == Kurt Roeckx writes:
> 
>  KR> As I understand it, it will not do the renegotation if you do it
>  KR> for the whole virtual host.
> 
> but wouldn't it cause prompts for certificate for the whole virtual
> host? i'd like to protect (with certificate validation) only part of the
> site, e.g. the admin interface, leaving the rest of the site for general
> users. i.e. the requirement to put the certificate validation for the
> whole virtual host requires creating a separate website with a dedicated
> IP address, which is not always desirable.

I'm not sure a new IP address is required for it.


Kurt