From: Joshua Slive Date: Tue, 6 Nov 2001 16:07:13 +0000 (+0000) Subject: Convert the ssl reference chapter into an apache module doc. I'm very sorry X-Git-Tag: 2.0.28~36 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=bfeb52b05c0ce69a5668d88f3e2d79bc7b307bea;p=thirdparty%2Fapache%2Fhttpd.git Convert the ssl reference chapter into an apache module doc. I'm very sorry for wrecking Ralf's nice formating work, but I didn't see an alternative. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@91765 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/directives.html b/docs/manual/mod/directives.html index 98dffc94f7f..302073a691b 100644 --- a/docs/manual/mod/directives.html +++ b/docs/manual/mod/directives.html @@ -613,6 +613,29 @@
  • SetOutputFilter
    • +
  • SSLPassPhraseDialog
    • +
  • SSLMutex
    • +
  • SSLRandomSeed
    • +
  • SSLSessionCache
    • +
  • SSLSessionCacheTimeout
    • +
  • SSLEngine
    • +
  • SSLProtocol
    • +
  • SSLCipherSuite
    • +
  • SSLCertificateFile
    • +
  • SSLCertificateKeyFile
    • +
  • SSLCertificateChainFile
    • +
  • SSLCACertificatePath
    • +
  • SSLCACertificateFile
    • +
  • SSLCARevocationPath
    • +
  • SSLCARevocationFile
    • +
  • SSLVerifyClient
    • +
  • SSLVerifyDepth
    • +
  • SSLLog
    • +
  • SSLLogLevel
    • +
  • SSLOptions
    • +
  • SSLRequireSSL
    • +
  • SSLRequire
    • +
  • StartServers
    • diff --git a/docs/manual/mod/index-bytype.html b/docs/manual/mod/index-bytype.html index 718252ae8f6..92054084645 100644 --- a/docs/manual/mod/index-bytype.html +++ b/docs/manual/mod/index-bytype.html @@ -262,6 +262,11 @@
    Class 1,2 WebDAV HTTP extensions
    +
    mod_ssl
    + +
    strong cryptography using the Secure Sockets Layer (SSL) and + Transport Layer Security (TLS) protocols +
    mod_ldap
    LDAP connection pool and shared memory cache.
    diff --git a/docs/manual/mod/index.html b/docs/manual/mod/index.html index e493a49eafe..5b85d14af94 100644 --- a/docs/manual/mod/index.html +++ b/docs/manual/mod/index.html @@ -209,6 +209,11 @@
    Automatically correct minor typos in URLs
    +
    mod_ssl
    + +
    strong cryptography using the Secure Sockets Layer (SSL) and + Transport Layer Security (TLS) protocols +
    mod_status
    Server status display
    diff --git a/docs/manual/mod/mod_ssl.html b/docs/manual/mod/mod_ssl.html index f7ecb633ffe..d745d34ca56 100644 --- a/docs/manual/mod/mod_ssl.html +++ b/docs/manual/mod/mod_ssl.html @@ -1,345 +1,166 @@ - - -mod_ssl: Reference - - + + +Apache module mod_ssl - - - - - - + + + + + + +

    Module mod_ssl

    + +

    This module provides strong cryptography using the Secure Sockets +Layer (SSL) and Transport Layer Security (TLS) protocols.

    + +

    Status: Extension
    +Source File: +mod_ssl.c
    +Module Identifier: +ssl_module

    + +

    Summary

    + +

    This module provides SSL v2/v3 and TLS v1 support for the Apache +HTTP Server. It was contributed by Ralf S. Engeschall based on his +mod_ssl project and originally derived from work by Ben Laurie.

    + +

    This module relies on OpenSSL +to provide the cryptography engine.

    + +

    Further details, discussion, and examples are provided in the +SSL documentation.

    + +

    Directives

    + + + +

    Environment Variables

    +This module provides a lot of SSL information as additional environment +variables to the SSI and CGI namespace. The generated variables are listed in +the table below. For backward compatibility the information can +be made available under different names, too. Look in the Compatibility chapter for details on the +compatibility variables. +

    - - -
    -
    - - - - - - - - - - - - - -
    - - - - - -
    - mod_ssl - - Chapter 3 -
    -
    - - - - - -
    -previous page
    Introduction -     		-next page
    Compatibility -
    -
    -
    - Reference -
    -
    - - - - - - + +
    - -``Try to understand everything, -but believe nothing!'' - -
    - -Unknown - -
    + + - -
    SSI/CGI Environment Variables
    + +
    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
    Variable Name:Value Type:Description:
    HTTPS flag HTTPS is being used.
    SSL_PROTOCOL string The SSL protocol version (SSLv2, SSLv3, TLSv1)
    SSL_SESSION_ID string The hex-encoded SSL session id
    SSL_CIPHER string The cipher specification name
    SSL_CIPHER_EXPORT string true if cipher is an export cipher
    SSL_CIPHER_USEKEYSIZE number Number of cipher bits (actually used)
    SSL_CIPHER_ALGKEYSIZE number Number of cipher bits (possible)
    SSL_VERSION_INTERFACE string The mod_ssl program version
    SSL_VERSION_LIBRARY string The OpenSSL program version
    SSL_CLIENT_M_VERSION string The version of the client certificate
    SSL_CLIENT_M_SERIAL string The serial of the client certificate
    SSL_CLIENT_S_DN string Subject DN in client's certificate
    SSL_CLIENT_S_DN_x509 string Component of client's Subject DN
    SSL_CLIENT_I_DN string Issuer DN of client's certificate
    SSL_CLIENT_I_DN_x509 string Component of client's Issuer DN
    SSL_CLIENT_V_START string Validity of client's certificate (start time)
    SSL_CLIENT_V_END string Validity of client's certificate (end time)
    SSL_CLIENT_A_SIG string Algorithm used for the signature of client's certificate
    SSL_CLIENT_A_KEY string Algorithm used for the public key of client's certificate
    SSL_CLIENT_CERT string PEM-encoded client certificate
    SSL_CLIENT_CERT_CHAINn string PEM-encoded certificates in client certificate chain
    SSL_CLIENT_VERIFY string NONE, SUCCESS, GENEROUS or FAILED:reason
    SSL_SERVER_M_VERSION string The version of the server certificate
    SSL_SERVER_M_SERIAL string The serial of the server certificate
    SSL_SERVER_S_DN string Subject DN in server's certificate
    SSL_SERVER_S_DN_x509 string Component of server's Subject DN
    SSL_SERVER_I_DN string Issuer DN of server's certificate
    SSL_SERVER_I_DN_x509 string Component of server's Issuer DN
    SSL_SERVER_V_START string Validity of server's certificate (start time)
    SSL_SERVER_V_END string Validity of server's certificate (end time)
    SSL_SERVER_A_SIG string Algorithm used for the signature of server's certificate
    SSL_SERVER_A_KEY string Algorithm used for the public key of server's certificate
    SSL_SERVER_CERT string PEM-encoded server certificate
    - -

    - - - - -
    -T -his chapter provides a reference to all configuration directives and -additional user visible features mod_ssl provides. It's intended as the -official resource when you want to know how a particilar mod_ssl functionality -is actually configured or activated. Each directive is documented similar to -the way standard Apache directives are documented in the official Apache -documentation set, i.e. for each directive especially the syntax, default and -context where applicable is given. -

    -Notice that there are three major classes of directives which are used by -mod_ssl: First Global Directives (i.e. directives with context -``server config''), which can occur inside the server config files but only -outside of any sectioning commands like <VirtualHost>. Second -Per-Server Directives (i.e. those with context ``server config, -virtual host''), which can occur inside the server config files both outside -(for the main/default server) and inside <VirtualHost> sections. -

    		 -   - -
    - - - - - - - -
    - -Table Of Contents - -
    - -Configuration Directives
    -        SSLPassPhraseDialog
    -        SSLMutex
    -        SSLRandomSeed
    -        SSLSessionCache
    -        SSLSessionCacheTimeout
    -        SSLEngine
    -        SSLProtocol
    -        SSLCipherSuite
    -        SSLCertificateFile
    -        SSLCertificateKeyFile
    -        SSLCertificateChainFile
    -        SSLCACertificatePath
    -        SSLCACertificateFile
    -        SSLCARevocationPath
    -        SSLCARevocationFile
    -        SSLVerifyClient
    -        SSLVerifyDepth
    -        SSLLog
    -        SSLLogLevel
    -        SSLOptions
    -        SSLRequireSSL
    -        SSLRequire
    -Additional Features
    -        Environment Variables
    -        Custom Log Formats
    -     +[ where x509 is a component of a X.509 DN: + C,ST,L,O,OU,CN,T,I,G,S,D,UID,Email ]
    +
    +

    -

    -And third Per-Directory Directives (i.e. those with context ``server -config, virtual host, directory, .htaccess''), which can pretty much occur -everywhere. Especially both inside the server config files and the -per-directory .htaccess files. The three classes are subsets of -each other, i.e. directives from the per-directory class can also be used in -the per-server and global context, and directives from the per-server class -can also be used the in the global context. -

    -Additional directives and environment variables provided by mod_ssl (via -on-the-fly mapping) for backward compatiblity to other Apache SSL solutions -are documented in the Compatibility chapter. -

    Configuration Directives

    -The most visible and error-prone things of mod_ssl are its configuration -directives. So we document them in great detail here to assist you in setting -up the best possible configuration of your SSL-aware webserver. +
    +

    Custom Log Formats

    +When mod_ssl is built into Apache or at least loaded (under DSO situation) +additional functions exist for the Custom Log Format of mod_log_config. First there is an additional +``%{varname}x'' eXtension format function +which can be used to expand any variables provided by any module, especially +those provided by mod_ssl which can you find in the above table. +

    +For backward compatibility there is additionally a special +``%{name}c'' cryptography format function +provided. Information about this function is provided in the Compatibility chapter. +

    +Example: +

    +
    +CustomLog logs/ssl_request_log \
+          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
+
    +
    + +


    - -

    SSLPassPhraseDialog

    + +

    SSLPassPhraseDialog directive

    @@ -353,31 +174,31 @@ up the best possible configuration of your SSL-aware webserver.
    Description: Type of pass phrase dialog for encrypted private keys
    Syntax: SSLPassPhraseDialog type
    Default: SSLPassPhraseDialog builtin
    Context: server config
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.1
    @@ -444,11 +265,11 @@ Example: SSLPassPhraseDialog exec:/usr/local/apache/sbin/pp-filter - +


    -

    SSLMutex

    +

    SSLMutex directive

    @@ -462,31 +283,31 @@ SSLPassPhraseDialog exec:/usr/local/apache/sbin/pp-filter
    Description: Semaphore for internal mutual exclusion of operations
    Syntax: SSLMutex type
    Default: SSLMutex none
    Context: server config
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.1
    @@ -538,11 +359,11 @@ Example: SSLMutex file:/usr/local/apache/logs/ssl_mutex - +


    -

    SSLRandomSeed

    +

    SSLRandomSeed directive

    @@ -556,31 +377,31 @@ SSLMutex file:/usr/local/apache/logs/ssl_mutex
    Description: Pseudo Random Number Generator (PRNG) seeding source
    Syntax: SSLRandomSeed context source [bytes]
    Default: none
    Context: server config
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.2
    @@ -677,11 +498,11 @@ SSLRandomSeed connect file:/dev/random SSLRandomSeed connect file:/dev/urandom 1024 - +


    -

    SSLSessionCache

    +

    SSLSessionCache directive

    @@ -694,31 +515,31 @@ SSLRandomSeed connect file:/dev/urandom 1024
    Description: Type of the global/inter-process SSL Session Cache
    Syntax: SSLSessionCache type
    Default: SSLSessionCache none
    Context: server config
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.1
    @@ -770,11 +591,11 @@ SSLSessionCache dbm:/usr/local/apache/logs/ssl_gcache_data SSLSessionCache shm:/usr/local/apache/logs/ssl_gcache_data(512000) - +


    -

    SSLSessionCacheTimeout

    +

    SSLSessionCacheTimeout directive

    @@ -787,31 +608,31 @@ SSLSessionCache shm:/usr/local/apache/logs/ssl_gcache_data(512000)
    Description: Number of seconds before an SSL session expires in the Session Cache
    Syntax: SSLSessionCacheTimeout seconds
    Default: SSLSessionCacheTimeout 300
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.0
    @@ -833,11 +654,11 @@ Example: SSLSessionCacheTimeout 600 - +


    -

    SSLEngine

    +

    SSLEngine directive

    @@ -850,31 +671,31 @@ SSLSessionCacheTimeout 600
    Description: SSL Engine Operation Switch
    Syntax: SSLEngine on|off
    Default: SSLEngine off
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.1
    @@ -899,11 +720,11 @@ SSLEngine on </VirtualHost> - +


    -

    SSLProtocol

    +

    SSLProtocol directive

    @@ -916,31 +737,31 @@ SSLEngine on
    Description: Configure usable SSL protocol flavors
    Syntax: SSLProtocol [+-]protocol ...
    Default: SSLProtocol all
    Context: server config, virtual host
    Override: Options
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.2
    @@ -990,11 +811,11 @@ Example: SSLProtocol all -SSLv2 - +


    -

    SSLCipherSuite

    +

    SSLCipherSuite directive

    @@ -1007,31 +828,31 @@ SSLProtocol all -SSLv2
    Description: Cipher Suite available for negotiation in SSL handshake
    Syntax: SSLCipherSuite cipher-spec
    Default: SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
    Context: server config, virtual host, directory, .htaccess
    Override: AuthConfig
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.1
    @@ -1212,11 +1033,11 @@ SSLCipherSuite RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW
    - +


    -

    SSLCertificateFile

    +

    SSLCertificateFile directive

    @@ -1229,31 +1050,31 @@ SSLCipherSuite RSA:!EXP:!NULL:+HIGH:+MEDIUM:-LOW
    Description: Server PEM-encoded X.509 Certificate file
    Syntax: SSLCertificateFile filename
    Default: None
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.0
    @@ -1277,11 +1098,11 @@ Example: SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt - +


    -

    SSLCertificateKeyFile

    +

    SSLCertificateKeyFile directive

    @@ -1294,31 +1115,31 @@ SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
    Description: Server PEM-encoded Private Key file
    Syntax: SSLCertificateKeyFile filename
    Default: None
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.0
    @@ -1347,11 +1168,11 @@ Example: SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key - +


    -

    SSLCertificateChainFile

    +

    SSLCertificateChainFile directive

    @@ -1364,31 +1185,31 @@ SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key
    Description: File of PEM-encoded Server CA Certificates
    Syntax: SSLCertificateChainFile filename
    Default: None
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.3.6
    @@ -1429,11 +1250,11 @@ Example: SSLCertificateChainFile /usr/local/apache/conf/ssl.crt/ca.crt - +


    -

    SSLCACertificatePath

    +

    SSLCACertificatePath directive

    @@ -1446,31 +1267,31 @@ SSLCertificateChainFile /usr/local/apache/conf/ssl.crt/ca.crt
    Description: Directory of PEM-encoded CA Certificates for Client Auth.
    Syntax: SSLCACertificatePath directory
    Default: None
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.0
    @@ -1498,11 +1319,11 @@ Example: SSLCACertificatePath /usr/local/apache/conf/ssl.crt/ - +


    -

    SSLCACertificateFile

    +

    SSLCACertificateFile directive

    @@ -1515,31 +1336,31 @@ SSLCACertificatePath /usr/local/apache/conf/ssl.crt/
    Description: File of concatenated PEM-encoded CA Certificates for Client Auth.
    Syntax: SSLCACertificateFile filename
    Default: None
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.0
    @@ -1563,11 +1384,11 @@ Example: SSLCACertificateFile /usr/local/apache/conf/ssl.crt/ca-bundle-client.crt - +


    -

    SSLCARevocationPath

    +

    SSLCARevocationPath directive

    @@ -1580,31 +1401,31 @@ SSLCACertificateFile /usr/local/apache/conf/ssl.crt/ca-bundle-client.crt
    Description: Directory of PEM-encoded CA CRLs for Client Auth.
    Syntax: SSLCARevocationPath directory
    Default: None
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.3
    @@ -1632,11 +1453,11 @@ Example: SSLCARevocationPath /usr/local/apache/conf/ssl.crl/ - +


    -

    SSLCARevocationFile

    +

    SSLCARevocationFile directive

    @@ -1649,31 +1470,31 @@ SSLCARevocationPath /usr/local/apache/conf/ssl.crl/
    Description: File of concatenated PEM-encoded CA CRLs for Client Auth.
    Syntax: SSLCARevocationFile filename
    Default: None
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.3
    @@ -1697,11 +1518,11 @@ Example: SSLCARevocationFile /usr/local/apache/conf/ssl.crl/ca-bundle-client.crl - +


    -

    SSLVerifyClient

    +

    SSLVerifyClient directive

    @@ -1714,31 +1535,31 @@ SSLCARevocationFile /usr/local/apache/conf/ssl.crl/ca-bundle-client.crl
    Description: Type of Client Certificate verification
    Syntax: SSLVerifyClient level
    Default: SSLVerifyClient none
    Context: server config, virtual host, directory, .htaccess
    Override: AuthConfig
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.0
    @@ -1780,11 +1601,11 @@ Example: SSLVerifyClient require - +


    -

    SSLVerifyDepth

    +

    SSLVerifyDepth directive

    @@ -1797,31 +1618,31 @@ SSLVerifyClient require
    Description: Maximum depth of CA Certificates in Client Certificate verification
    Syntax: SSLVerifyDepth number
    Default: SSLVerifyDepth 1
    Context: server config, virtual host, directory, .htaccess
    Override: AuthConfig
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.0
    @@ -1854,11 +1675,11 @@ Example: SSLVerifyDepth 10 - +


    -

    SSLLog

    +

    SSLLog directive

    @@ -1871,31 +1692,31 @@ SSLVerifyDepth 10
    Description: Where to write the dedicated SSL engine logfile
    Syntax: SSLLog filename
    Default: None
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.1
    @@ -1923,11 +1744,11 @@ Example: SSLLog /usr/local/apache/logs/ssl_engine_log - +


    -

    SSLLogLevel

    +

    SSLLogLevel directive

    @@ -1940,31 +1761,31 @@ SSLLog /usr/local/apache/logs/ssl_engine_log
    Description: Logging level for the dedicated SSL engine logfile
    Syntax: SSLLogLevel level
    Default: SSLLogLevel none
    Context: server config, virtual host
    Override: Not applicable
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.1
    @@ -2011,11 +1832,11 @@ Example: SSLLogLevel warn - +


    -

    SSLOptions

    +

    SSLOptions directive

    @@ -2028,31 +1849,31 @@ SSLLogLevel warn
    Description: Configure various SSL engine run-time options
    Syntax: SSLOptions [+-]option ...
    Default: None
    Context: server config, virtual host, directory, .htaccess
    Override: Options
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.1
    @@ -2086,7 +1907,7 @@ The available options are:

    When this option is enabled, additional CGI/SSI environment variables are created for backward compatibility to other Apache SSL solutions. Look in - the Compatibility chapter for details + the Compatibility chapter for details on the particular variables generated.

  • ExportCertData @@ -2151,11 +1972,11 @@ SSLOptions +FakeBasicAuth -StrictRequire <Files> - +


    -

    SSLRequireSSL

    +

    SSLRequireSSL directive

    @@ -2168,31 +1989,31 @@ SSLOptions +FakeBasicAuth -StrictRequire
    Description: Deny access when SSL is not used for the HTTP request
    Syntax: SSLRequireSSL
    Default: None
    Context: directory, .htaccess
    Override: AuthConfig
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.0
    @@ -2215,11 +2036,11 @@ Example: SSLRequireSSL - +


    -

    SSLRequire

    +

    SSLRequire directive

    @@ -2232,31 +2053,31 @@ SSLRequireSSL
    Description: Allow access only when an arbitrarily complex boolean expression is true
    Syntax: SSLRequire expression
    Default: None
    Context: directory, .htaccess
    Override: AuthConfig
    Status: Extension
    Module: mod_ssl
    Compatibility: mod_ssl 2.1
    @@ -2404,136 +2225,9 @@ SSL_VERSION_INTERFACE SSL_CLIENT_S_DN_OU SSL_SERVER_S_DN_OU -
    -
    -

    -

    Additional Features

    -

    Environment Variables

    -This module provides a lot of SSL information as additional environment -variables to the SSI and CGI namespace. The generated variables are listed in -Table 4. For backward compatibility the information can -be made available under different names, too. Look in the Compatibility chapter for details on the -compatibility variables. -

    -

    - - - -
    Table 4: SSI/CGI Environment Variables
    - - -
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Variable Name:Value Type:Description:
    HTTPS flag HTTPS is being used.
    SSL_PROTOCOL string The SSL protocol version (SSLv2, SSLv3, TLSv1)
    SSL_SESSION_ID string The hex-encoded SSL session id
    SSL_CIPHER string The cipher specification name
    SSL_CIPHER_EXPORT string true if cipher is an export cipher
    SSL_CIPHER_USEKEYSIZE number Number of cipher bits (actually used)
    SSL_CIPHER_ALGKEYSIZE number Number of cipher bits (possible)
    SSL_VERSION_INTERFACE string The mod_ssl program version
    SSL_VERSION_LIBRARY string The OpenSSL program version
    SSL_CLIENT_M_VERSION string The version of the client certificate
    SSL_CLIENT_M_SERIAL string The serial of the client certificate
    SSL_CLIENT_S_DN string Subject DN in client's certificate
    SSL_CLIENT_S_DN_x509 string Component of client's Subject DN
    SSL_CLIENT_I_DN string Issuer DN of client's certificate
    SSL_CLIENT_I_DN_x509 string Component of client's Issuer DN
    SSL_CLIENT_V_START string Validity of client's certificate (start time)
    SSL_CLIENT_V_END string Validity of client's certificate (end time)
    SSL_CLIENT_A_SIG string Algorithm used for the signature of client's certificate
    SSL_CLIENT_A_KEY string Algorithm used for the public key of client's certificate
    SSL_CLIENT_CERT string PEM-encoded client certificate
    SSL_CLIENT_CERT_CHAINn string PEM-encoded certificates in client certificate chain
    SSL_CLIENT_VERIFY string NONE, SUCCESS, GENEROUS or FAILED:reason
    SSL_SERVER_M_VERSION string The version of the server certificate
    SSL_SERVER_M_SERIAL string The serial of the server certificate
    SSL_SERVER_S_DN string Subject DN in server's certificate
    SSL_SERVER_S_DN_x509 string Component of server's Subject DN
    SSL_SERVER_I_DN string Issuer DN of server's certificate
    SSL_SERVER_I_DN_x509 string Component of server's Issuer DN
    SSL_SERVER_V_START string Validity of server's certificate (start time)
    SSL_SERVER_V_END string Validity of server's certificate (end time)
    SSL_SERVER_A_SIG string Algorithm used for the signature of server's certificate
    SSL_SERVER_A_KEY string Algorithm used for the public key of server's certificate
    SSL_SERVER_CERT string PEM-encoded server certificate
    -[ where x509 is a component of a X.509 DN: - C,ST,L,O,OU,CN,T,I,G,S,D,UID,Email ] -
    -
    -
    -

    -
    -

    Custom Log Formats

    -When mod_ssl is built into Apache or at least loaded (under DSO situation) -additional functions exist for the Custom Log Format of mod_log_config. First there is an additional -``%{varname}x'' eXtension format function -which can be used to expand any variables provided by any module, especially -those provided by mod_ssl which can you find in Table 4. -

    -For backward compatibility there is additionally a special -``%{name}c'' cryptography format function -provided. Information about this function is provided in the Compatibility chapter. -

    -Example: -

    -
    -CustomLog logs/ssl_request_log \
-          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
-
    -
    -

    -
    - - - - - - - - - - -
    - - - - - -
    -previous page
    Introduction -     		-next page
    Compatibility -
    -
    - - - - -
    - mod_ssl 2.8, User Manual
    - The Apache Interface to OpenSSL -     -     		- Copyright © 1998-2001 - Ralf S. Engelschall
    - All Rights Reserved
    -     -
    -
    - - - - +

    +

    + +