Configure the Apache SSL proxy server to work with Smart Card

To configure the Apache SSL proxy server to work with Smart Card:

  1. Open the httpd.conf file

  2. Uncheck headers_module:

    LoadModule headers_module modules/mod_headers.so
  3. Open the httpd-ssl.conf file.
  4. Find the related VirtualHost and modify as follows:

    1. Uncomment SSLOptions to extract the certificate:

      SSLOptions +ExportCertData
    2. Set the header that OpenText Application Quality Management will use to authenticate (the default value is CERT):

      RequestHeader set CERT "%{SSL_CLIENT_CERT}s"
  5. Restart Apache so it will read the new configuration.

    Run <apache-directory>/bin/apachectl -k restart

  6. Verify that Apache accepts your smart card certificate.

    Go to https://<webserver>:<securePort>/qcbin. Make sure the OpenText Application Quality Management home page opens after you provide your smart card certificate.

    Note: The web server name must be in FQDN (fully qualified domain name) format when using a secure connection.