.el .ne 3
.IP "\\$1" \\$2
..
-.TH "HTTPD" 8 "2018-09-27" "Apache HTTP Server" "httpd"
+.TH "HTTPD" 8 "2025-08-29" "Apache HTTP Server" "httpd"
.SH NAME
httpd \- Apache Hypertext Transfer Protocol Server
Skip document root check at startup/restart\&.
.TP
\fB-t\fR
-Run syntax tests for configuration files only\&. The program immediately exits after these syntax parsing tests with either a return code of 0 (Syntax OK) or return code not equal to 0 (Syntax Error)\&. If -D \fIDUMP\fR_\fIVHOSTS \fRis also set, details of the virtual host configuration will be printed\&. If -D \fIDUMP\fR_\fIMODULES \fR is set, all loaded modules will be printed\&. If -D \fIDUMP\fR_\fICERTS \fR is set and mod_ssl is used, configured SSL certificates will be printed\&. If -D \fIDUMP\fR_\fICA\fR_\fI_CERTS \fR is set and mod_ssl is used, configured SSL CA certificates and configured directories containing SSL CA certificates will be printed\&.
+Run syntax tests for configuration files only\&. The program immediately exits after these syntax parsing tests with either a return code of 0 (Syntax OK) or return code not equal to 0 (Syntax Error)\&. This option can be combined with various \fI-D DUMP_\&.\&.\&.\fR arguments to print information about the configuration, as listed below\&.
.TP
\fB-v\fR
Print the version of \fBhttpd\fR, and then exit\&.
\fB-w\fR
Keep the console window open on error so that the error message can be read\&.
+.SH "DUMPING CONFIGURATION DATA"
+
+.PP
+The following options can be combined with \fI-t\fR to show information about the configuration:
+
+
+.TP
+\fI-D DUMP_VHOSTS\fR
+print details of the virtual host configuration\&.
+.TP
+\fI-D DUMP_MODULES\fR
+print (human-readable) details of all loaded modules\&.
+.TP
+\fI-D DUMP_MODULES\fR \fI-D DUMP_MODULE_DATA\fR
+print details of all loaded modules in a structured (TOML) format\&.
+.TP
+\fI-D DUMP_CERTS\fR
+If mod_ssl is loaded, print details of configured SSL/TLS certificates\&.
+
<p>httpd configuration files contain one directive per line.
The backslash "\" may be used as the last character on a line
to indicate that the directive continues onto the next line.
- There must be no other characters or white space between the
- backslash and the end of the line.</p>
+ To be interpreted as such a continuation, there must be no
+ other characters or white space between the backslash and the
+ end of the line. </p>
- <p>Arguments to directives are separated by whitespace. If an
+ <p>Lines that begin with the hash character "#" are considered
+ comments, and are ignored. Comments may <strong>not</strong> be
+ included on the same line as a configuration directive, including
+ at the start of a line that has been continued as described in the
+ preceding pargraph.
+ </p>
+
+ <p> White space occurring before a directive is ignored, so
+ you may indent directives for clarity. Blank lines are also ignored.
+ Arguments to directives are separated by whitespace. If an
argument contains spaces, you must enclose that argument in quotes.</p>
<p>Directives in the configuration files are case-insensitive,
- but arguments to directives are often case sensitive. Lines
- that begin with the hash character "#" are considered
- comments, and are ignored. Comments may <strong>not</strong> be
- included on the same line as a configuration directive.
- White space occurring before a directive is ignored, so
- you may indent directives for clarity. Blank lines are also ignored.</p>
+ but arguments to directives are often case sensitive. </p>
<p>The values of variables defined with the <code class="directive"><a href="./mod/core.html#define">Define</a></code> or of shell environment variables can
be used in configuration file lines using the syntax
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
<td>replace(string, "from", "to") replaces all occurrences of "from"
in the string with "to". The first parameter must not be a literal string.
</td><td /></tr>
+<tr><td><code>escapehtml</code></td>
+ <td>Escape a HTML string</td><td /></tr>
</table>
<p>The functions marked as "restricted" in the final column are not
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="./mod/">Modules</a> | <a href="./mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html">Glossary</a> | <a href="./sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
to remain <em>set</em> while allowing any others to be set.
</p></div>
- <div class="example"><p><code>
- AllowOverride Options=Indexes,MultiViews
- </code></p></div>
+ <pre class="prettyprint lang-config">AllowOverride Options=Indexes,MultiViews</pre>
+
</dd>
</dl>
By default, when the handling of a request requires no access
to the data within a file -- for example, when delivering a
static file -- Apache httpd uses sendfile to deliver the file contents
- without ever reading the file if the OS supports it.</p>
+ without ever reading the file if the OS supports it. If SSL/TLS is used
+ for the connection, or if any <a href="../filter.html">output filter</a>
+ is configured which inspects or modifies the output, the sendfile mechanism
+ will not be used regardless of this configuration option.</p>
<p>This sendfile mechanism avoids separate read and send operations,
and buffer allocations. But on some platforms or within some
<p>Example:</p>
<pre class="prettyprint lang-config"># Limit of 1 MiB
-LimitXMLRequestBody 1073741824</pre>
+LimitXMLRequestBody 1048576</pre>
has been specified by this directive. The intent is to limit access to
paths derived from untrusted inputs.</p>
- <div class="example"><p><code>
- UNCList example.com other.example.com
- </code></p></div>
+ <pre class="prettyprint lang-config">UNCList example.com other.example.com</pre>
+
<div class="warning"><h3>Security</h3>
- <p>UNC paths accessed outside of request processing, such as during startup,
- are not necessarily checked against the hosts configured with this directive.</p>
+ <p>The values specified by this directive are only checked by some
+ components of the server, prior to accessing filesystem paths that
+ may be inadvertently derived from untrusted inputs. </p>
+ <p> Windows systems should be isolated at the network layer from
+ making outbound SMB/NTLM calls to unexpected destinations as a
+ more comprehensive and pre-emptive measure.</p>
</div>
<div class="warning"><h3>Directive Ordering</h3>
<li>Parsed port from <code>Host:</code> header</li>
<li>Physical port (only with <code class="directive">UseCanonicalPhysicalPort</code> ON)</li>
<li>Port provided in <code class="directive"><a href="#servername">Servername</a></code></li>
- <li>Default port</li>
+ <li>Default port for the scheme/protocol (such as 80 or 443)</li>
</ol>
</dd>
<dt><code>UseCanonicalName On</code></dt>
<ol>
<li>Port provided in <code class="directive"><a href="#servername">Servername</a></code></li>
<li>Physical port (only with <code class="directive">UseCanonicalPhysicalPort</code> ON)</li>
- <li>Default port</li>
+ <li>Default port for the scheme/protocol (such as 80 or 443)</li>
</ol>
</dd>
</dl>
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2024 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
<li><img alt="" src="../images/down.gif" /> <a href="#h2earlyhint">H2EarlyHint</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#h2earlyhints">H2EarlyHints</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#h2maxdataframelen">H2MaxDataFrameLen</a></li>
+<li><img alt="" src="../images/down.gif" /> <a href="#h2maxheaderblocklen">H2MaxHeaderBlockLen</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#h2maxsessionstreams">H2MaxSessionStreams</a></li>
+<li><img alt="" src="../images/down.gif" /> <a href="#h2maxstreamerrors">H2MaxStreamErrors</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#h2maxworkeridleseconds">H2MaxWorkerIdleSeconds</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#h2maxworkers">H2MaxWorkers</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#h2minworkers">H2MinWorkers</a></li>
response data is available, smaller frames will be sent.
</p>
+</div>
+<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
+<div class="directive-section"><h2><a name="H2MaxHeaderBlockLen" id="H2MaxHeaderBlockLen">H2MaxHeaderBlockLen</a> <a name="h2maxheaderblocklen" id="h2maxheaderblocklen">Directive</a> <a title="Permanent link" href="#h2maxheaderblocklen" class="permalink">¶</a></h2>
+<table class="directive">
+<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Maximum size of response headers</td></tr>
+<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>H2MaxHeaderBlockLen <em>n</em></code></td></tr>
+<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>H2MaxHeaderBlockLen 0</code></td></tr>
+<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host</td></tr>
+<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr>
+<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_http2</td></tr>
+<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.5.1 and later.</td></tr>
+</table>
+ <p>
+ <code class="directive">H2MaxHeaderBlockLen</code> sets the limit
+ on the overall size of response headers. A setting of 0
+ will leave this at the default of 64 KB in nghttp2.
+ </p>
+ <p>
+ Responses with headers larger than this (adding all headers)
+ will not be processed and result in a reset of the stream.
+ </p>
+
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="H2MaxSessionStreams" id="H2MaxSessionStreams">H2MaxSessionStreams</a> <a name="h2maxsessionstreams" id="h2maxsessionstreams">Directive</a> <a title="Permanent link" href="#h2maxsessionstreams" class="permalink">¶</a></h2>
<div class="example"><h3>Example</h3><pre class="prettyprint lang-config">H2MaxSessionStreams 20</pre>
</div>
+</div>
+<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
+<div class="directive-section"><h2><a name="H2MaxStreamErrors" id="H2MaxStreamErrors">H2MaxStreamErrors</a> <a name="h2maxstreamerrors" id="h2maxstreamerrors">Directive</a> <a title="Permanent link" href="#h2maxstreamerrors" class="permalink">¶</a></h2>
+<table class="directive">
+<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Maximum amount of client caused errors to tolerate</td></tr>
+<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>H2MaxStreamErrors <em>n</em></code></td></tr>
+<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>H2MaxStreamErrors 8</code></td></tr>
+<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host</td></tr>
+<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr>
+<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_http2</td></tr>
+<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.5.1 and later.</td></tr>
+</table>
+ <p>
+ <code class="directive">H2MaxStreamErrors</code> sets the maximum amount
+ of tolerated HTTP/2 stream errors caused by the client.
+ When exceeding this limit, the connection will be closed.
+ Stream errors are protocol violations on an individual HTTP/2
+ stream that do not necessitate a connection close by the
+ protocol specification, but can be a sign of malicious
+ activity by a client.
+ </p>
+ <p>
+ Set to 0 to tolerate faulty clients.
+ </p>
+
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="H2MaxWorkerIdleSeconds" id="H2MaxWorkerIdleSeconds">H2MaxWorkerIdleSeconds</a> <a name="h2maxworkeridleseconds" id="h2maxworkeridleseconds">Directive</a> <a title="Permanent link" href="#h2maxworkeridleseconds" class="permalink">¶</a></h2>
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
ACME protocol (<a href="https://tools.ietf.org/html/rfc8555">RFC 8555</a>).
Certificates will be renewed by the module ahead of their expiration to account
for disruption in internet services. There are ways to monitor the status of all
- certififcates managed this way and configurations that will run your own
+ certificates managed this way and configurations that will run your own
notification commands on renewal, expiration and errors.
</p><p>
Second, mod_md offers an alternate OCSP Stapling implementation. This works with
</p>
</div>
- <div class="note"><h3>tailscale</h3>
- <p>
- Since version 2.4.14 of the module, you can use it to get certificates
- for your <a href="https://tailscale.com">tailscale</a> domains.
- </p>
- <pre class="prettyprint lang-config"><MDomain mydomain.some-thing.ts.net>
- MDCertificateProtocol tailscale
- MDCertificateAuthority file://localhost/var/run/tailscale/tailscaled.sock",
-</MDomain></pre>
-
- <p>
- Tailscale provides secure networking between your machines, where ever
- they are, and can provide domain names in the *.ts.net space for them.
- For those, it will then provide Let's Encrypt certificates as well, so
- you can open these domains in your browser securely.
- </p>
- <p>
- The directives listed above tell Apache to contact the local tailscale
- demon for obtaining and renewing certificates. This will only work for
- the domain name that tailscale assigns to your machine.
- </p>
- <p>
- Otherwise, these certificates work exactly like the ones retrieved
- via the ACME protocol from Lets Encrypt. You see them in status reporting
- and MDMessageCmd directives are executed for them as well.
- </p>
- <p>
- More details are <a href="https://github.com/icing/mod_md#tailscale">
- available at the mod_md github documentation</a>.
- </p>
- <p>
- Note that this feature only works on machines where the tailscale
- demon provides a unix domain socket. This, so far, seems only the
- case on *nix systems.
- </p>
- </div>
-
</div>
<div id="quickview"><h3 class="directives">Directives</h3>
<ul id="toc">
<li><img alt="" src="../images/down.gif" /> <a href="#mdcertificatestatus">MDCertificateStatus</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdchallengedns01">MDChallengeDns01</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdchallengedns01version">MDChallengeDns01Version</a></li>
+<li><img alt="" src="../images/down.gif" /> <a href="#mdcheckinterval">MDCheckInterval</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdcontactemail">MDContactEmail</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mddrivemode">MDDriveMode</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdexternalaccountbinding">MDExternalAccountBinding</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdomainsetsection"><MDomainSet></a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdportmap">MDPortMap</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdprivatekeys">MDPrivateKeys</a></li>
+<li><img alt="" src="../images/down.gif" /> <a href="#mdprofile">MDProfile</a></li>
+<li><img alt="" src="../images/down.gif" /> <a href="#mdprofilemandatory">MDProfileMandatory</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdrenewmode">MDRenewMode</a></li>
+<li><img alt="" src="../images/down.gif" /> <a href="#mdrenewviaari">MDRenewViaARI</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdrenewwindow">MDRenewWindow</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdrequirehttps">MDRequireHttps</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#mdretrydelay">MDRetryDelay</a></li>
For testing, CAs commonly offer a second service URL.
The 'test' service does not give certificates valid in a browser,
but are more relaxed in regard to rate limits.
- This allows for verfication of your own setup before switching
+ This allows for verification of your own setup before switching
to the production service URL.
</p>
<div class="example"><h3>LE Test Setup</h3><pre class="prettyprint lang-config">MDCertificateAuthority https://acme-staging-v02.api.letsencrypt.org/directory</pre>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="MDCertificateCheck" id="MDCertificateCheck">MDCertificateCheck</a> <a name="mdcertificatecheck" id="mdcertificatecheck">Directive</a> <a title="Permanent link" href="#mdcertificatecheck" class="permalink">¶</a></h2>
<table class="directive">
-<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Set name and URL pattern for a certificate monitoring sitSet name and URL pattern for a certificate monitoring sitee</td></tr>
+<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Set name and URL pattern for a certificate monitoring site.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>MDCertificateCheck <var>name</var> <var>url</var></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
This setting is global and cannot be varied per domain.
</p>
+</div>
+<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
+<div class="directive-section"><h2><a name="MDCheckInterval" id="MDCheckInterval">MDCheckInterval</a> <a name="mdcheckinterval" id="mdcheckinterval">Directive</a> <a title="Permanent link" href="#mdcheckinterval" class="permalink">¶</a></h2>
+<table class="directive">
+<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Determines how often certificates are checked</td></tr>
+<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>MDCheckInterval <var>duration</var></code></td></tr>
+<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>MDCheckInterval 12h</code></td></tr>
+<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
+<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
+<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_md</td></tr>
+<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.4.60 and later</td></tr>
+</table>
+ <p>
+ The time between certificate checks. By default, the validity
+ and need for renewals is checked twice a day. This interval is
+ not followed precisely. Instead the module randomly applies
+ a +/-50% jitter to it. With the default of 12 hours, this
+ means the actual time between runs varies between 6 and 18
+ hours, jittered anew every run. This helps to mitigate
+ traffic peaks at ACME servers.
+ </p><p>
+ The minimum duration you may configure is 1 second. It is
+ not recommended to use such short times in production.
+ </p>
+
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="MDContactEmail" id="MDContactEmail">MDContactEmail</a> <a name="mdcontactemail" id="mdcontactemail">Directive</a> <a title="Permanent link" href="#mdcontactemail" class="permalink">¶</a></h2>
<p>
You can configure those globally or for a specific MDomain. Since
these values allow anyone to register under the same account, it is
- adivsable to give the configuration file restricted permissions,
+ advisable to give the configuration file restricted permissions,
e.g. root only.
</p>
<p>
generated for certificates. ACME account keys are unaffected by this.
</p>
+</div>
+<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
+<div class="directive-section"><h2><a name="MDProfile" id="MDProfile">MDProfile</a> <a name="mdprofile" id="mdprofile">Directive</a> <a title="Permanent link" href="#mdprofile" class="permalink">¶</a></h2>
+<table class="directive">
+<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Use a specific ACME profile from the CA</td></tr>
+<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>MDProfile name</code></td></tr>
+<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
+<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
+<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_md</td></tr>
+<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.4.64 and later</td></tr>
+</table>
+ <p>
+ This about a non-standard ACME extension by Let's Encrypt.
+ </p><p>
+ Lets Encrypt announced they will add Certificate Profiles
+ support in their CA during 2025, beginning with their staging
+ servers. This, among some other details, let's you select the
+ lifetime of the certificates you get. The "default" profile
+ will keep the 90 days and a "tlsserver" profile will issue
+ certificates with only 6 days of validity.
+ </p><p>
+ If you do not change your mod_md configuration, you will
+ continue to get the 90 days certificates. Should you believe
+ that a shorter lifetime is beneficial for you (and take the
+ risk that the renewal time is way shorter),
+ you can configure the profile to use via 'MDProfile tlsserver'.
+ </p><p>
+ The profile names are defined by the CA. If a profile you
+ configure is not available, no profile will be used and
+ the certificate will be issue according to what the CA
+ considers default.
+ </p><p>
+ See <code class="directive"><a href="#mdprofilemandatory">MDProfileMandatory</a></code>
+ on how to disable defaults for profiles.
+ </p>
+
+</div>
+<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
+<div class="directive-section"><h2><a name="MDProfileMandatory" id="MDProfileMandatory">MDProfileMandatory</a> <a name="mdprofilemandatory" id="mdprofilemandatory">Directive</a> <a title="Permanent link" href="#mdprofilemandatory" class="permalink">¶</a></h2>
+<table class="directive">
+<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Control if an MDProfile is mandatory.</td></tr>
+<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>MDProfileMandatory on|off</code></td></tr>
+<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>MDProfileMandatory off</code></td></tr>
+<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
+<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
+<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_md</td></tr>
+</table>
+ <p>
+ Controls if a <code class="directive"><a href="#mdprofile">MDProfile</a></code>
+ you configure is mandatory or not. When mandatory and the CA
+ does not offer a configured profile, the certificate
+ renewal will fail.
+ </p><p>
+ When not mandatory and a profile is not offered by the CA,
+ renewals will be performed without specifying a profile and
+ the CA will issue a certificates according to its defaults.
+ </p>
+
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="MDRenewMode" id="MDRenewMode">MDRenewMode</a> <a name="mdrenewmode" id="mdrenewmode">Directive</a> <a title="Permanent link" href="#mdrenewmode" class="permalink">¶</a></h2>
be attempted.
</p>
+</div>
+<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
+<div class="directive-section"><h2><a name="MDRenewViaARI" id="MDRenewViaARI">MDRenewViaARI</a> <a name="mdrenewviaari" id="mdrenewviaari">Directive</a> <a title="Permanent link" href="#mdrenewviaari" class="permalink">¶</a></h2>
+<table class="directive">
+<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>usage of the ACME ARI extension (rfc9773).</td></tr>
+<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>MDRenewViaARI on|off</code></td></tr>
+<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>MDRenewViaARI on</code></td></tr>
+<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
+<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
+<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_md</td></tr>
+</table>
+ <p>
+ En-/Disable certificate renewals triggered via the ACME ARI
+ extension (rfc9773). These renewals happen *in addition* to
+ the mechanism controlled by <code class="directive">MDRenewWindow</code>.
+ </p><p>
+ ACME ARI allows an ACME CA to somewhat shape incoming renewal
+ traffic. More importantly though, it can inform clients of
+ urgent renewals, e.g. when a certificate or part of its chain
+ has been revoked.
+ </p>
+
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="MDRenewWindow" id="MDRenewWindow">MDRenewWindow</a> <a name="mdrenewwindow" id="mdrenewwindow">Directive</a> <a title="Permanent link" href="#mdrenewwindow" class="permalink">¶</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Time length for first retry, doubled on every consecutive error.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>MDRetryDelay <var>duration</var></code></td></tr>
-<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>MDRetryDelay 5s</code></td></tr>
+<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>MDRetryDelay 30s</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_md</td></tr>
It is kept separate for each certificate renewal. Meaning an error
on one MDomain does not delay the renewals of other domains.
</p>
+ <p>
+ In mod_md v2.6.1, the default delay has been increased from 5
+ seconds to 30.
+ </p>
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
<!DOCTYPE modulesynopsis SYSTEM "../style/modulesynopsis.dtd">
<?xml-stylesheet type="text/xsl" href="../style/manual.fr.xsl"?>
<!-- French translation : Lucien GENTIS -->
-<!-- English Revision: 1927807 -->
+<!-- English Revision: 1927807:1928039 (outdated) -->
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
<variants>
<variant>en</variant>
- <variant>fr</variant>
+ <variant outdated="yes">fr</variant>
</variants>
</metafile>
designed for transmitting a binary file in an ASCII (text)
format.</p>
- <p>The <a href="http://www.ietf.org/rfc/rfc2616.txt">HTTP/1.1
+ <p>The <a href="https://www.rfc-editor.org/rfc/rfc2616">HTTP/1.1
RFC</a>, section 14.11 puts it this way:</p>
- <blockquote cite="http://www.ietf.org/rfc/rfc2616.txt">
+ <blockquote cite="https://www.rfc-editor.org/rfc/rfc2616">
<p>The Content-Encoding entity-header field is used as a modifier to
the media-type. When present, its value indicates what additional
content codings have been applied to the entity-body, and thus what
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
<dt><code>Content-Language:</code></dt>
<dd>The language(s) of the variant, as an Internet standard
- language tag (<a href="http://www.ietf.org/rfc/rfc1766.txt">RFC 1766</a>). An example is <code>en</code>,
+ language tag (<a href="https://www.rfc-editor.org/rfc/rfc1766">RFC 1766</a>). An example is <code>en</code>,
meaning English. If the variant contains more than one
language, they are separated by a comma.</dd>
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
<code class="module"><a href="../mod/mod_rewrite.html">mod_rewrite</a></code>. In order to prevent confusion, numbered
(unnamed) backreferences are ignored. Use named groups instead.</p>
-<pre class="prettyprint lang-config"><ProxyMatch ^http://(?<sitename>[^/]+)>
- require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
+<pre class="prettyprint lang-config"><ProxyMatch "^http://(?<sitename>[^/]+)">
+ Require ldap-group cn=%{env:MATCH_SITENAME},ou=combined,o=Example
</ProxyMatch></pre>
<td><p>TTL in seconds for how long DNS resolutions of the backend address are cached.
-1 means until restart of Apache httpd.</p>
</td></tr>
+ <tr><td><a id="multipathtcp" name="multipathtcp">multipathtcp</a></td>
+ <td>Off</td>
+ <td><p>Enable/disable the use of <a href="https://mptcp.dev">Multipath TCP (MPTCP)</a></p>
+ </td></tr>
</table>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Remote proxy used to handle requests matched by regular
expressions</td></tr>
-<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>ProxyRemoteMatch <var>regex</var> <var>remote-server</var></code></td></tr>
+<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>ProxyRemoteMatch <var>regex</var> <var>remote-server</var> [<var>username:password</var>]</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_proxy</td></tr>
+<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>The optional third argument is usable only in httpd 2.5.1 and later.</td></tr>
</table>
<p>The <code class="directive">ProxyRemoteMatch</code> is identical to the
<code class="directive"><a href="#proxyremote">ProxyRemote</a></code> directive, except that
</table>
<p>This directive controls the use of the <code>Via:</code> HTTP
header by the proxy. Its intended use is to control the flow of
- proxy requests along a chain of proxy servers. See <a href="http://www.ietf.org/rfc/rfc2616.txt">RFC 2616</a> (HTTP/1.1), section
+ proxy requests along a chain of proxy servers. See <a href="https://www.rfc-editor.org/rfc/rfc2616">RFC 2616</a> (HTTP/1.1), section
14.45 for an explanation of <code>Via:</code> header lines.</p>
<ul>
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
<li><img alt="" src="../images/down.gif" /> <a href="#listen">Listen</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#listenbacklog">ListenBackLog</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#listencoresbucketsratio">ListenCoresBucketsRatio</a></li>
+<li><img alt="" src="../images/down.gif" /> <a href="#listentcpdeferaccept">ListenTCPDeferAccept</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#maxconnectionsperchild">MaxConnectionsPerChild</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#maxmemfree">MaxMemFree</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#maxrequestworkers">MaxRequestWorkers</a></li>
to the same port. (If the server is built with IPv4-mapped
addresses <em>disabled</em>, this is the default behaviour and
this option has no effect.)</li>
+
+ <li><code>multipathtcp</code>: Enable the use of
+ <a href="https://mptcp.dev">Multipath TCP (MPTCP)</a> for the
+ sockets. Beware that this option is currently limited to Linux
+ only.
+ </li>
</ul>
<div class="note"><h3>Error condition</h3>
(like a hostname resolving to an IP used elsewhere).</p>
</div>
+</div>
+<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
+<div class="directive-section"><h2><a name="ListenTCPDeferAccept" id="ListenTCPDeferAccept">ListenTCPDeferAccept</a> <a name="listentcpdeferaccept" id="listentcpdeferaccept">Directive</a> <a title="Permanent link" href="#listentcpdeferaccept" class="permalink">¶</a></h2>
+<table class="directive">
+<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Value set for the socket option TCP_DEFER_ACCEPT if it is set</td></tr>
+<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>ListenTCPDeferAccept <var>integer</var></code></td></tr>
+<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>ListenTCPDeferAccept 30</code></td></tr>
+<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
+<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>MPM</td></tr>
+<tr><th><a href="directive-dict.html#Module">Module:</a></th><td><code class="module"><a href="../mod/event.html">event</a></code>, <code class="module"><a href="../mod/worker.html">worker</a></code>, <code class="module"><a href="../mod/prefork.html">prefork</a></code></td></tr>
+<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in Apache HTTP Server 2.5.1 and later</td></tr>
+</table>
+ <p>The value specified here is set as a value for the socket option
+ <code>TCP_DEFER_ACCEPT</code> if it is set on the listen socket.
+ This happens when running on Linux and <code class="directive"><a href="../mod/core.html#acceptfilter">AcceptFilter</a></code> is set to anything besides
+ <code>none</code>. In any other cases this setting is ignored.
+ For more details see the Linux
+ <a href="http://man7.org/linux/man-pages/man7/tcp.7.html">
+ tcp(7)</a> man page.</p>
+
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="MaxConnectionsPerChild" id="MaxConnectionsPerChild">MaxConnectionsPerChild</a> <a name="maxconnectionsperchild" id="maxconnectionsperchild">Directive</a> <a title="Permanent link" href="#maxconnectionsperchild" class="permalink">¶</a></h2>
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
<?xml version="1.0"?>
<!DOCTYPE modulesynopsis SYSTEM "../style/modulesynopsis.dtd">
<?xml-stylesheet type="text/xsl" href="../style/manual.de.xsl"?>
-<!-- English Revision: 151408:1920586 (outdated) -->
+<!-- English Revision: 151408:1928022 (outdated) -->
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE modulesynopsis SYSTEM "../style/modulesynopsis.dtd">
<?xml-stylesheet type="text/xsl" href="../style/manual.fr.xsl"?>
-<!-- English Revision: 1920586 -->
+<!-- English Revision: 1920586:1928022 (outdated) -->
<!-- French translation : Lucien GENTIS -->
<!-- Reviewed by : Vincent Deffontaines -->
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE modulesynopsis SYSTEM "../style/modulesynopsis.dtd">
<?xml-stylesheet type="text/xsl" href="../style/manual.ja.xsl"?>
-<!-- English Revision: 674934:1920586 (outdated) -->
+<!-- English Revision: 674934:1928022 (outdated) -->
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
<variants>
<variant outdated="yes">de</variant>
<variant>en</variant>
- <variant>fr</variant>
+ <variant outdated="yes">fr</variant>
<variant outdated="yes">ja</variant>
<variant outdated="yes">tr</variant>
</variants>
<?xml version="1.0"?>
<!DOCTYPE modulesynopsis SYSTEM "../style/modulesynopsis.dtd">
<?xml-stylesheet type="text/xsl" href="../style/manual.tr.xsl"?>
-<!-- English Revision: 1308409:1920586 (outdated) -->
+<!-- English Revision: 1308409:1928022 (outdated) -->
<!-- =====================================================
Translated by: Nilgün Belma Bugüner <nilgun belgeler.org>
Reviewed by: Orhan Berent <berent belgeler.org>
</div>
<div id="quickview"><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#synopsis">Synopsis</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#options">Options</a></li>
+<li><img alt="" src="../images/down.gif" /> <a href="#dumpconf">Dumping configuration data</a></li>
</ul><h3>See also</h3><ul class="seealso"><li><a href="../invoking.html">Starting Apache httpd</a></li><li><a href="../stopping.html">Stopping Apache httpd</a></li><li><a href="../configuring.html">Configuration Files</a></li><li><a href="../platform/">Platform-specific Documentation</a></li><li><code class="program"><a href="../programs/apachectl.html">apachectl</a></code></li><li><a href="#comments_section">Comments</a></li></ul></div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<dd>Process the configuration <var>directive</var> after reading config
files.</dd>
-
<dt><code>-D <var>parameter</var></code></dt>
<dd>Sets a configuration <var>parameter </var>which can be used with
<dt><code>-t</code></dt>
<dd>Run syntax tests for configuration files only. The program
-immediately exits after these syntax parsing tests with either a return code
-of 0 (Syntax OK) or return code not equal to 0 (Syntax Error). If -D
-<var>DUMP</var>_<var>VHOSTS </var>is also set, details of the virtual host
-configuration will be printed. If -D <var>DUMP</var>_<var>MODULES </var> is
-set, all loaded modules will be printed. If -D <var>DUMP</var>_<var>CERTS </var>
-is set and <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> is used, configured SSL certificates will
-be printed. If -D <var>DUMP</var>_<var>CA</var>_<var>_CERTS </var> is set and
-<code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> is used, configured SSL CA certificates and configured
-directories containing SSL CA certificates will be printed.</dd>
+immediately exits after these syntax parsing tests with either a
+return code of 0 (Syntax OK) or return code not equal to 0 (Syntax
+Error). This option can be combined with various <var>-D
+DUMP_...</var> arguments to print information about the configuration,
+<a href="#dumpconf">as listed below</a>.</dd>
<dt><code>-v</code></dt>
</dl>
+</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
+<div class="section">
+<h2><a name="dumpconf" id="dumpconf">Dumping configuration data</a> <a title="Permanent link" href="#dumpconf" class="permalink">¶</a></h2>
+
+<p>The following options can be combined with <var>-t</var> to show
+information about the configuration:</p>
+
+<dl>
+ <dt><var>-D DUMP_VHOSTS</var></dt> <dd>print details of the virtual
+ host configuration.</dd>
+
+ <dt><var>-D DUMP_MODULES</var></dt> <dd>print (human-readable)
+ details of all loaded modules.</dd>
+
+ <dt><var>-D DUMP_MODULES</var> <var>-D DUMP_MODULE_DATA</var></dt>
+ <dd>print details of all loaded modules in a structured (TOML) format.</dd>
+
+ <dt><var>-D DUMP_CERTS</var></dt>
+ <dd>If <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> is loaded, print details of
+ configured SSL/TLS certificates.</dd>
+</dl>
</div></div>
<div class="bottomlang">
<p><span>Available Languages: </span><a href="../en/programs/httpd.html" title="English"> en </a> |
}
})(window, document);
//--><!]]></script></div><div id="footer">
-<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
+<p class="apache">Copyright 2025 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/quickreference.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();