What I'm trying to do is implement client-certificate authentication on my website (running on Apache).

From this question I understand that it's not possible to generate a client certificate myself based on a signed certificate (published by for instance Comodo).

My question is; For any website on for instance Apache, can I use a self-signed CA with which I verify my users (by them importing a client-certificate) and at the same time use a signed certificate so that 'the url bar' goes green?

Thanks a lot!


The certificate used to authenticate the server and the client do not have to be issued by the same entity. It is totally possible for you to set the web-server up with a certificate you bought and in the meantime create your own Public Key-Infrastructure to handle client certificates.

The authentication process is not mutual, so this situation is possible and yet remains secure thanks to asymmetric cryptography and proper trust chain.

|improve this answer|||||
  • Thanks a lot for this confirmation! I'll try to configure this in Apache tomorrow and let you know :-) – Guy Hagemans Feb 23 '16 at 18:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.