> From: John.Florian@dart.biz
>
> > From: mikeb@redhat.com
> >
> > This looks like a change in the format mod_ssl uses for the
> > SSL_CLIENT_S_DN variable.  If you change the ProxyDNs entry to match the
> > DN printed in the backtrace, it should fix the problem.
>
> Sure enough, that did the trick.  I'll make a note of this at
> https://fedoraproject.org/wiki/Koji/ServerHowTo.  Any idea of what
> version of mod_ssl brought about this change?

A bit of Googling shows that v2.3.11 brought about this change.  To help others in the future, I've noted the requirements here: https://fedoraproject.org/wiki/Koji/ServerHowTo#Authentication_Configuration

--
John Florian