[Pkg-openssl-devel] Bug#557261: Bug#557261: libssl0.9.8: Updating from version k-5 to k-6 breaks client auth with stunnel4

[Vladimir Volovich]

"KR" == Kurt Roeckx writes:

 KR> As I understand it, it will not do the renegotation if you do it
 KR> for the whole virtual host.

but wouldn't it cause prompts for certificate for the whole virtual
host? i'd like to protect (with certificate validation) only part of the
site, e.g. the admin interface, leaving the rest of the site for general
users. i.e. the requirement to put the certificate validation for the
whole virtual host requires creating a separate website with a dedicated
IP address, which is not always desirable.

Best,
v.