Title: Client Certificate Authentication Author: MarioLipinski Published: 14 juillet 2013 Last modified: 17 juillet 2013 --- Recherche d’extensions Cette extension **n’a pas été testée avec plus de trois mises à jour majeures de WordPress**. Elle peut ne plus être maintenue ou supportée et peut avoir des problèmes de compatibilité lorsqu’elle est utilisée avec des versions de WordPress plus récentes. ![](https://s.w.org/plugins/geopattern-icon/client-certificate-authentication.svg) # Client Certificate Authentication Par [MarioLipinski](https://profiles.wordpress.org/mariolipinski/) [Télécharger](https://downloads.wordpress.org/plugin/client-certificate-authentication.1.0.2.zip) * [Détails](https://fr.wordpress.org/plugins/client-certificate-authentication/#description) * [Avis](https://fr.wordpress.org/plugins/client-certificate-authentication/#reviews) * [Installation](https://fr.wordpress.org/plugins/client-certificate-authentication/#installation) * [Développement](https://fr.wordpress.org/plugins/client-certificate-authentication/#developers) [Support](https://wordpress.org/support/plugin/client-certificate-authentication/) ## Description The Client Certificate Authentication plugin enables WordPress to login a user with a SSL client certificate. The plugin uses the email address from the subject field to identify the user by the email address of his wordpress account. Optionally, new accounts can be created on the fly by using email address and name from the certificate. By limiting login and registration to users providing a client certificate, bots are locked out and spam is eliminated. Acknowledgements: This plugin is based on the [HTTP Authentication plugin](https://wordpress.org/plugins/http-authentication/) by Daniel Westermann-Clark. Ideas taken from Dan B.’s implementation for client certificate authentication. ## Installation 1. Login as an existing user, such as admin. 2. Upload the `client-certificate-authentication` folder to your plugins folder, usually` wp-content/plugins`. (Or simply via the built-in installer.) 3. Activate the plugin on the Plugins screen. 4. Logout. 5. Require certificate authentication for `wp-login.php` and `wp-admin`. 6. Try logging in with your client certificate. ## FAQ How should I set up client certificate authentication? This depends on your hosting environment and your means of authentication. The plugin uses the $_SERVER environment variables `SSL_CLIENT_S_DN_Email` (beginning with) for the email address and `SSL_CLIENT_S_DN_CN` for the name. A working example is given below: In Apache HTTP (non-HTTPS) config add: ``` RewriteEngine On RewriteRule ^/(wp-(admin|login\.php).*) https://%{HTTP_HOST}/$1 ``` In Apache HTTPS config: ``` SSLVerifyClient optional RewriteEngine on RewriteCond %{HTTP_USER_AGENT} .*Safari.* RewriteCond %{SSL:SSL_CLIENT_VERIFY} !=SUCCESS RewriteRule .* /wp-admin [redirect,last] SSLVerifyClient require ``` Also make sure to set SSLCACertificatePath and enable CRL checks. ## Avis Il n’y a aucun avis pour cette extension. ## Contributeurs/contributrices & développeurs/développeuses « Client Certificate Authentication » est un logiciel libre. Les personnes suivantes ont contribué à cette extension. Contributeurs * [ MarioLipinski ](https://profiles.wordpress.org/mariolipinski/) [Traduisez « Client Certificate Authentication » dans votre langue.](https://translate.wordpress.org/projects/wp-plugins/client-certificate-authentication) ### Le développement vous intéresse ? [Parcourir le code](https://plugins.trac.wordpress.org/browser/client-certificate-authentication/), consulter le [SVN dépôt](https://plugins.svn.wordpress.org/client-certificate-authentication/), ou s’inscrire au [journal de développement](https://plugins.trac.wordpress.org/log/client-certificate-authentication/) par [RSS](https://plugins.trac.wordpress.org/log/client-certificate-authentication/?limit=100&mode=stop_on_copy&format=rss). ## Journal des modifications #### 1.0 Initial release. #### 1.0.1 Documentation updates. #### 1.0.2 Fixes to the short description. ## Méta * Version **1.0.2** * Dernière mise à jour **il y a 13 ans** * Installations actives **10+** * Version de WordPress ** 3.1 ou plus ** * Testé jusqu’à **3.5.2** * Langue * [English (US)](https://wordpress.org/plugins/client-certificate-authentication/) * Étiquettes * [authentication](https://fr.wordpress.org/plugins/tags/authentication/)[ssl](https://fr.wordpress.org/plugins/tags/ssl/) * [Vue avancée](https://fr.wordpress.org/plugins/client-certificate-authentication/advanced/) ## Évaluations 5 sur 5 étoiles. * [ 2 avis à 5 étoiles ](https://wordpress.org/support/plugin/client-certificate-authentication/reviews/?filter=5) * [ 0 avis à 4 étoile ](https://wordpress.org/support/plugin/client-certificate-authentication/reviews/?filter=4) * [ 0 avis à 3 étoile ](https://wordpress.org/support/plugin/client-certificate-authentication/reviews/?filter=3) * [ 0 avis à 2 étoile ](https://wordpress.org/support/plugin/client-certificate-authentication/reviews/?filter=2) * [ 0 avis à 1 étoile ](https://wordpress.org/support/plugin/client-certificate-authentication/reviews/?filter=1) [Votre avis](https://wordpress.org/support/plugin/client-certificate-authentication/reviews/#new-post) [Tout voir](https://wordpress.org/support/plugin/client-certificate-authentication/reviews/) ## Contributeurs * [ MarioLipinski ](https://profiles.wordpress.org/mariolipinski/) ## Support Quelque chose à dire ? Besoin d’aide ? [Voir le forum de support](https://wordpress.org/support/plugin/client-certificate-authentication/) ## Faire un don Souhaitez-vous soutenir l’avancement de cette extension ? [ Faire un don à cette extension ](http://www.cacert.org/index.php?id=13)