ReadMe

This product released under the GPL.

With this product you can authenticate some users by SSL client certificates. This product was inspired by the cookie crumbler product from the CMF. At every request it checks whether a certificate is presents. If so, it looks up a user name for the certificate data. If a user name found, the underlying acl_users objects are querried for a user object with the name. Finally the basic authentication vars are set with the user's data. If no username or user object found, things work as usual.

Setup

You need to set up Apache to do certificate checking. Read my How-To at http://www.zope.org/Members/zhivago/SSLCertAuth/How-To_SSLCertAuth Untar the archive to your Zope's Product directory, and restart it. Add an SSL Certificate Authenticator instance to the folder you want certificate authentication. On the Edit page insert the certificate data for the users. The checked certificate field can be selected on the Properties page.

Drawbacks

At every request acl_users objects are querried twice. Once by the product, and second by validate. To avoid this, use my LoginManager loginmethod for ssl authentication.