Restrict access using SSL certs

Question

is there a way to restrict access to a website, running Apache via cPanel, using SSL (like CTLs on IIS/Windows)?

I.E, the user has to have an ssl certificate installed/issued to be able to access the site.

Answer 1

This is certainly possible, through the SSLRequire directive. The most trivial setup is to formulate %{SSL_CLIENT_VERIFY} eq "SUCCESS". This also requires settting SSLVerifyClient and SSLCACertificatePath, as well as to install the trusted CA certificates.