Differences

This shows you the differences between two versions of the page.

--- plugin:authclientcert [2019-02-17 10:44] – [Description] paweljasinski
+++ plugin:authclientcert [2019-02-17 10:50] – [Description] paweljasinski
@@ Line 23: / Line 23: @@
 ===== Description =====
-This plugin authenticate user based on content of client certificate provided by reverse proxy or web server. The certificate is picked up from _SERVER variable. Either SSL_CLIENT_CERT or any HTTP header can be configured as source of certificate. This plugin expects certificate in PEM format. The BEGIN/END CERTIFICATE fields are optional.
+This plugin authenticate user based on content of client certificate provided by a reverse proxy or a web server. The certificate is picked up from the _SERVER variable. Either SSL_CLIENT_CERT or any HTTP header can be configured as a source of certificate. This plugin expects certificate in PEM format. The BEGIN/END CERTIFICATE fields are optional.
-The certificate validation must be performed by web server or reverse proxy. Certificates delivered to this plugin are assumed valid.
+This plugin does not perform any certificate validation. It is up to the configured web server or reverse proxy to validate the certificate before passing it.
 The following table shows mapping between certificate fields and user info.
@@ Line 39: / Line 39: @@
 Logging out and profile editing are disabled. However, the administrator can modify group membership or delete  a user.
-authclientcert uses [[plugin:authplain]] as backend storage.
+Authclientcert plugin uses [[plugin:authplain]] as backend storage.