diff --git a/koji-setup/deploy-koji.sh b/koji-setup/deploy-koji.sh
index 465d78e..2d14b10 100755
--- a/koji-setup/deploy-koji.sh
+++ b/koji-setup/deploy-koji.sh
@@ -292,12 +292,12 @@ SSLRandomSeed connect builtin
     SSLCertificateKeyFile $KOJI_PKI_DIR/private/kojihub.key
     SSLCertificateChainFile $KOJI_PKI_DIR/koji_ca_cert.crt
     SSLCACertificateFile $KOJI_PKI_DIR/koji_ca_cert.crt
-    SSLVerifyClient optional
+    SSLVerifyClient require
     SSLVerifyDepth 10
 
-    <Files ~ "\.(cgi|shtml|phtml|php3?)$">
+    <FilesMatch "\.(cgi|shtml|phtml|php3?)$">
         SSLOptions +StdEnvVars
-    </Files>
+    </FilesMatch>
     <Directory "/var/www/cgi-bin">
         SSLOptions +StdEnvVars
     </Directory>