Page 1 of 1

Client authentication with certificate (USB smart card)

Posted: Mon Dec 21, 2009 9:55 am
by haldebaran
Hi,

I'm looking for a plugin/module to allow user (who have a certificate on a smart card) to login automatically.
After a few research on google, I found that Apache must be configure as well (sslverifyclient require).

Someone already implement a solution to improve com_user to allow people to login with the classic way or with a smart card?

Thanks

Re: Client authentication with certificate (USB smart card)

Posted: Mon Mar 22, 2010 5:07 pm
by chaseeb
Hello Antoine,

Did you ever find a way to implement your automatic login w/ smart card?

Re: Client authentication with certificate (USB smart card)

Posted: Wed Mar 31, 2010 8:33 am
by haldebaran
Hello chaseeb,

Sorry to answer just now, I was away the last month...

I found this solution. Create a new component who is able to:
  • login
    check existing user
    create new user
Just need now to configure apache (httpd.conf)
# Secure (SSL/TLS) connections

Code: Select all

Include conf/extra/httpd-ssl.conf
httpd-ssl.conf :

Code: Select all

SSLCACertificatePath conf/mycertifcatfolder
SSLCACertificateFile conf/mycertifcatfolder/mycertificat.crt
I protected the folder of my component with a .htaccess file:

Code: Select all

SSLVerifyClient require
SSLRequireSSL
SSLVerifyDepth 5
#SSLRequire ( %{SSL_CLIENT_I_DN_O} eq "SwissSign AG" )
SSLOptions +ExportCertData
Finally, just create a module on the first page of my Joomla who point to the task login of my component...

Bests regards
Antoine