Comments on: HOWTO Configure Apache for SSL with DoD CAC Authentication on Ubuntu 9.04

By: matthew

matthew — Wed, 03 Mar 2010 05:55:58 +0000

openssl crl -in DOD_CA-13.crl -inform DER -out DOD_CA-13.crl -outform PEM
Nevemind this works

By: Matthew

Matthew — Wed, 03 Mar 2010 05:36:51 +0000

Have messed with the CRL files at all? Looks like they not in a format mod_ssl likes.

By: Chad

Chad — Wed, 06 Jan 2010 09:24:55 +0000

Does any currently use DoD CAC and DoD ECA PKI both on the same site?

By: xw0rm

xw0rm — Fri, 18 Dec 2009 10:32:58 +0000

OK, so I have already done this, but there is a new dodeca2.cac cert listed on the DISA web site (making the total number of root certs four now, instead of three). How does one add this in?

By: Scott Jarkoff

Scott Jarkoff — Thu, 10 Dec 2009 12:01:16 +0000

I can't imagine it being any different though I would wonder why you would need to read CAC's from a non-DoD server. In any case, since it's Windows I expect you would have to use Tumbleweed and possibly ActiveCard, though I honestly have no experience in that arena (ie. setting up a Windows server to authenticate DoD CAC's).

By: elitz

elitz — Wed, 09 Dec 2009 09:02:49 +0000

Scott: you mentioned somewhere in your notes experimenting with using dod cac's on a non-DOD server (not on any of the military domains). I'm attempting to read cac cards on a non-DOD server. Happens to be a windows server..so not exactly relevant to above aritlce, but none the less i thought i'd ask in case you had any insight into this subject. thanks.

By: Scott Jarkoff

Scott Jarkoff — Sat, 19 Sep 2009 11:46:04 +0000

There is no reason why this will not work on other versions of Ubuntu. You may need to adjust a thing or two but for the most part everything should work as listed above.

By: Scott Jarkoff

Scott Jarkoff — Sat, 19 Sep 2009 11:45:24 +0000

Based on DoD policy, the cert needs to be issued by DISA. Self-signed certs, while fine for testing are not valid for everyday use.

By: redskinsone

redskinsone — Sat, 19 Sep 2009 02:08:31 +0000

Is Step #7 above required — does your server cert need to be issued by the DoD ? Can it just be a self-signed or issued by VeriSign?

By: eddiepetosa

eddiepetosa — Sun, 13 Sep 2009 22:40:07 +0000

Will this work on other versions of Ubuntu? Or is there another tutorial for that?
Eddie Petosa
ssl certificates