From: Joe Orton Date: Mon, 12 May 2025 14:00:00 +0000 (+0000) Subject: Merge r1924774 from trunk: X-Git-Tag: 2.4.64-rc1-candidate~82 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=2018de7157b497301a1fcc984be7ecc498021d6c;p=thirdparty%2Fapache%2Fhttpd.git Merge r1924774 from trunk: Update mod_ssl docs to reference current & working openssl.org URIs throughout. PR: 69682 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1925513 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index f953da00c2..d943156e27 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -33,7 +33,7 @@ Layer (SSL) and Transport Layer Security (TLS) protocols

This module provides SSL v3 and TLS v1.x support for the Apache HTTP Server. SSL v2 is no longer supported.

-

This module relies on OpenSSL +

This module relies on OpenSSL to provide the cryptography engine.

Further details, discussion, and examples are provided in the @@ -736,7 +736,7 @@ Since TLSv1.3 does not offer renegotiations, specifying ciphers for it in a directory context is not allowed.

For a list of TLSv1.3 cipher names, see -the OpenSSL +the OpenSSL documentation.

An SSL cipher specification in cipher-spec is composed of 4 major @@ -2428,7 +2428,7 @@ With OpenSSL 3.0 or later, if no engine is specified but the key or certificate is specified using a PKCS#11 URIs then it is tried to load the key and certificate from an OpenSSL provider. The OpenSSL provider to use must be defined and configured in the OpenSSL config file, -and it must support the STORE method +and it must support the STORE method for PKCS#11 URIs.

@@ -2940,7 +2940,7 @@ features are added to OpenSSL.

depends on the OpenSSL version being used for mod_ssl (at least version 1.0.2 is required). For a list of supported command names, see the section Supported configuration file commands in the -SSL_CONF_cmd(3) manual page for OpenSSL.

+SSL_CONF_cmd(3) manual page for OpenSSL.

Some of the SSLOpenSSLConfCmd commands can be used as an alternative to existing directives (such as