Client authentication with certificate (USB smart card)

This forum is for general questions about extensions for Joomla! version 1.5.x.

Moderator: General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.
Locked
haldebaran
Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Wed Jul 01, 2009 3:12 pm

Client authentication with certificate (USB smart card)

Post by haldebaran » Mon Dec 21, 2009 9:55 am

Hi,

I'm looking for a plugin/module to allow user (who have a certificate on a smart card) to login automatically.
After a few research on google, I found that Apache must be configure as well (sslverifyclient require).

Someone already implement a solution to improve com_user to allow people to login with the classic way or with a smart card?

Thanks
Antoine

chaseeb
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Mon Mar 22, 2010 5:04 pm

Re: Client authentication with certificate (USB smart card)

Post by chaseeb » Mon Mar 22, 2010 5:07 pm

Hello Antoine,

Did you ever find a way to implement your automatic login w/ smart card?

haldebaran
Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Wed Jul 01, 2009 3:12 pm

Re: Client authentication with certificate (USB smart card)

Post by haldebaran » Wed Mar 31, 2010 8:33 am

Hello chaseeb,

Sorry to answer just now, I was away the last month...

I found this solution. Create a new component who is able to:
  • login
    check existing user
    create new user
Just need now to configure apache (httpd.conf)
# Secure (SSL/TLS) connections

Code: Select all

Include conf/extra/httpd-ssl.conf
httpd-ssl.conf :

Code: Select all

SSLCACertificatePath conf/mycertifcatfolder
SSLCACertificateFile conf/mycertifcatfolder/mycertificat.crt
I protected the folder of my component with a .htaccess file:

Code: Select all

SSLVerifyClient require
SSLRequireSSL
SSLVerifyDepth 5
#SSLRequire ( %{SSL_CLIENT_I_DN_O} eq "SwissSign AG" )
SSLOptions +ExportCertData
Finally, just create a module on the first page of my Joomla who point to the task login of my component...

Bests regards
Antoine
Antoine


Locked

Return to “Extensions for Joomla! 1.5”