From: Christophe Jaillet Date: Fri, 2 Oct 2020 15:52:39 +0000 (+0000) Subject: Document that HTTPS and SSL_TLS_SNI environment variables are always defined, regardl... X-Git-Tag: 2.5.0-alpha2-ci-test-only~1197 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4c1276bf618f9d341161e84cc7240c9515ef7ea8;p=thirdparty%2Fapache%2Fhttpd.git Document that HTTPS and SSL_TLS_SNI environment variables are always defined, regardless of 'SSLOptions StdEnvVars' . Fix some small style issues to improve syntax hightlight. PR 64783. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1882199 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index 2452811cf0b..bbb0123b43a 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -43,21 +43,23 @@ to provide the cryptographic engine.

Environment Variables

This module can be configured to provide several items of SSL information -as additional environment variables to the SSI and CGI namespace. This +as additional environment variables to the SSI and CGI namespace. Except for +HTTPS and SSL_TLS_SNI which are always defined, this information is not provided by default for performance reasons. (See -SSLOptions StdEnvVars, below.) The generated variables +SSLOptions StdEnvVars, below) +The generated variables are listed in the table below. For backward compatibility the information can be made available under different names, too. Look in the Compatibility chapter for details on the compatibility variables.

- +
- - - + + + @@ -1484,10 +1486,10 @@ SSLSRPUnknownUserSeed "secret"

This directive can be used to control various run-time options on a -per-directory basis. Normally, if multiple SSLOptions +per-directory basis. Normally, if multiple SSLOptions could apply to a directory, then the most specific one is taken completely; the options are not merged. However if all the -options on the SSLOptions directive are preceded by a +options on the SSLOptions directive are preceded by a plus (+) or minus (-) symbol, the options are merged. Any options preceded by a + are added to the options currently in force, and any options preceded by a @@ -1547,8 +1549,8 @@ The available options are:

  • StrictRequire

    - This forces forbidden access when SSLRequireSSL or - SSLRequire successfully decided that access should be + This forces forbidden access when SSLRequireSSL or + SSLRequire successfully decided that access should be forbidden. Usually the default is that in the case where a ``Satisfy any'' directive is used, and other access restrictions are passed, denial of access due to SSLRequireSSL or

  • Variable Name:Value Type:Description:Variable NameValue TypeDescription
    HTTPS flag HTTPS is being used.
    SSL_PROTOCOL string The SSL protocol version (SSLv3, TLSv1, TLSv1.1, TLSv1.2)