From: Rich Bowen The HTTP protocol follows the robustness principle
- as described in RFC1122,
+ as described in When you miss HTTP headers from the environment, make
sure they are formatted according to
- RFC 2616,
+
See: the SSL FAQ
- and RFC 3546
+ and
There has been a lot written about HTTP/2 and how it works. The most normative is, of course,
- its RFC 7540
+ its
But, as RFC do, it's not really a good thing to read first. It's better to first understand @@ -294,7 +294,7 @@ H2Push Off
An alternative to PUSHing resources is to send Link headers to the
client before the response is even ready. This uses the HTTP feature called "Early Hints" and
- is described in RFC 8297.
In order to use this, you need to explicitly enable it on the server via
This module implements HTTP Digest Authentication
- (RFC2617), and
+ (
This module provides token parsing front-ends such as
A JWT token is read from the Authorization header with an auth-scheme of Bearer.
diff --git a/docs/manual/mod/mod_cache.xml b/docs/manual/mod/mod_cache.xml index 693c96657d..c96d271b05 100644 --- a/docs/manual/mod/mod_cache.xml +++ b/docs/manual/mod/mod_cache.xml @@ -38,8 +38,7 @@ wish to limit access by client host name, address or environment variable. -To modify Cache-Control directives other than
- max-age (see RFC
- 2616 section 14.9), you can use the
When the This module provides HTTP/2 (RFC 7540)
+ This module provides HTTP/2 ( This module relies on libnghttp2
diff --git a/docs/manual/mod/mod_ident.xml b/docs/manual/mod/mod_ident.xml
index 4502a6a3d5..d51528c257 100644
--- a/docs/manual/mod/mod_ident.xml
+++ b/docs/manual/mod/mod_ident.xml
@@ -29,8 +29,7 @@
This module queries an RFC 1413 compatible daemon on a remote host to look up the owner of
+ This module queries an This directive enables RFC 1413-compliant logging of the remote user name for each
+ This directive enables This directive specifies the timeout duration of an ident
- request. The default value of 30 seconds is recommended by RFC 1413, mainly because
+ request. The default value of 30 seconds is recommended by
This module manages common properties of domains for one or more virtual hosts.
Its serves two main purposes: for one, supervise/renew TLS certificates via the
- ACME protocol (RFC 8555).
+ ACME protocol ( This directive controls the use of the If available, they may do so using the Expires header is already part of the response
diff --git a/docs/manual/mod/mod_http2.xml b/docs/manual/mod/mod_http2.xml
index 85d526baeb..d979c22a31 100644
--- a/docs/manual/mod/mod_http2.xml
+++ b/docs/manual/mod/mod_http2.xml
@@ -30,7 +30,7 @@
%...l
format string.Content-Language:en,
+ language tag (en,
meaning English. If the variant contains more than one
language, they are separated by a comma.Via: HTTP
header by the proxy. Its intended use is to control the flow of
- proxy requests along a chain of proxy servers. See RFC 2616 (HTTP/1.1), section
+ proxy requests along a chain of proxy servers. See Via: header lines.
diff --git a/docs/manual/mod/mod_proxy_http2.xml b/docs/manual/mod/mod_proxy_http2.xml
index 160d98c3e7..5ffb194def 100644
--- a/docs/manual/mod/mod_proxy_http2.xml
+++ b/docs/manual/mod/mod_proxy_http2.xml
@@ -123,7 +123,7 @@ ProxyPassReverse "/app" "http://app.example.com"
Link headers."103 Early Hints"
intermediate responses as specified in
- RFC 8297. This will give
+
Host,
User-Agent, Referer, and
Accept-Language. A regular expression may be
diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml
index 5178f9ade7..af35051d80 100644
--- a/docs/manual/mod/mod_ssl.xml
+++ b/docs/manual/mod/mod_ssl.xml
@@ -657,29 +657,29 @@ The available (case-insensitive) protocols are:
This is the Secure Sockets Layer (SSL) protocol, version 3.0, from
the Netscape Corporation.
It is the successor to SSLv2 and the predecessor to TLSv1, but is
- deprecated in RFC 7568.TLSv1
This is the Transport Layer Security (TLS) protocol, version 1.0.
It is the successor to SSLv3 and is defined in
- RFC 2246.
+
TLSv1.1 (when using OpenSSL 1.0.1 and later)
A revision of the TLS 1.0 protocol, as defined in - RFC 4346.
TLSv1.2 (when using OpenSSL 1.0.1 and later)
A revision of the TLS 1.1 protocol, as defined in - RFC 5246.
TLSv1.3 (when using OpenSSL 1.1.1 and later)
A new version of the TLS protocol, as defined in - RFC 8446.
all
@@ -986,7 +986,7 @@ Beginning with version 2.4.7, mod_ssl makes use of
standardized DH parameters with prime lengths of 2048, 3072 and 4096 bits
and with additional prime lengths of 6144 and 8192 bits beginning with
version 2.4.10
-(from RFC 3526), and hands
+(from
Optionally configures a secret key for encrypting and decrypting
TLS session tickets, as defined in
-RFC 5077.
+
To generate custom DH parameters, use the openssl dhparam 1024
command. Alternatively, you can use the following standard 1024-bit DH
- parameters from RFC 2409,
+ parameters from
-----BEGIN DH PARAMETERS----- MIGHAoGBAP//////////yQ/aoiFowjTExmKLgNwc0SkCTgiKZ8x0Agu+pjsTmyJR diff --git a/docs/manual/ssl/ssl_intro.xml b/docs/manual/ssl/ssl_intro.xml index 878152b27a..76e8e654ce 100644 --- a/docs/manual/ssl/ssl_intro.xml +++ b/docs/manual/ssl/ssl_intro.xml @@ -654,9 +654,7 @@ See for instance [SSL3]
The SSL Protocol -Version 3.0, 1996. See RFC 6101.
The TLS Protocol Version 1.0,