{"action":"created","issue":{"url":"https://api.github.com/repos/veewee/veewee.github.io/issues/2","repository_url":"https://api.github.com/repos/veewee/veewee.github.io","labels_url":"https://api.github.com/repos/veewee/veewee.github.io/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/veewee/veewee.github.io/issues/2/comments","events_url":"https://api.github.com/repos/veewee/veewee.github.io/issues/2/events","html_url":"https://github.com/veewee/veewee.github.io/issues/2","id":165188512,"number":2,"title":"Unable to connect","user":{"login":"grosch","id":315966,"avatar_url":"https://avatars.githubusercontent.com/u/315966?v=3","gravatar_id":"","url":"https://api.github.com/users/grosch","html_url":"https://github.com/grosch","followers_url":"https://api.github.com/users/grosch/followers","following_url":"https://api.github.com/users/grosch/following{/other_user}","gists_url":"https://api.github.com/users/grosch/gists{/gist_id}","starred_url":"https://api.github.com/users/grosch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/grosch/subscriptions","organizations_url":"https://api.github.com/users/grosch/orgs","repos_url":"https://api.github.com/users/grosch/repos","events_url":"https://api.github.com/users/grosch/events{/privacy}","received_events_url":"https://api.github.com/users/grosch/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/veewee/veewee.github.io/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":16,"created_at":"2016-07-12T21:43:49Z","updated_at":"2016-07-14T07:39:52Z","closed_at":null,"body":"Hi.  I just read your article on Authenticating with X.509 client certificates.  I followed your steps and downloaded the client.pem file to my client.  Now I'm just trying to test it out from the command line so on curl I'm giving -k and -E and then the pem file, but I'm getting an unknown ca error at that point.\r\n\r\nThoughts?"},"comment":{"url":"https://api.github.com/repos/veewee/veewee.github.io/issues/comments/232587377","html_url":"https://github.com/veewee/veewee.github.io/issues/2#issuecomment-232587377","issue_url":"https://api.github.com/repos/veewee/veewee.github.io/issues/2","id":232587377,"user":{"login":"grosch","id":315966,"avatar_url":"https://avatars.githubusercontent.com/u/315966?v=3","gravatar_id":"","url":"https://api.github.com/users/grosch","html_url":"https://github.com/grosch","followers_url":"https://api.github.com/users/grosch/followers","following_url":"https://api.github.com/users/grosch/following{/other_user}","gists_url":"https://api.github.com/users/grosch/gists{/gist_id}","starred_url":"https://api.github.com/users/grosch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/grosch/subscriptions","organizations_url":"https://api.github.com/users/grosch/orgs","repos_url":"https://api.github.com/users/grosch/repos","events_url":"https://api.github.com/users/grosch/events{/privacy}","received_events_url":"https://api.github.com/users/grosch/received_events","type":"User","site_admin":false},"created_at":"2016-07-14T07:39:52Z","updated_at":"2016-07-14T07:39:52Z","body":"Thanks.  I scripted the generation of the .pem  and .p12 files now so that I don’t forget how this works :)\n \n> # This will add the SSL_ environment variables to the request.\n> SSLOptions +StdEnvVars\n> The last variable SSLOptions is critical. This will allow you to access the SSL identity in your script:\n> \nNot really sure why you’re doing this.   The cert was generated for a VirtualHost and so by virtue of the connection happening we know what application is was linked against.  I set the SSLVerifyClient to required, not optional, because you MUST have the key to connect. \n\nIf you start adding in an email address, aren’t you then just going back to having a key per person, instead of a key per machine?  \n\n"}}
{"actor":{"display_login":"grosch"}}