From: Christophe Jaillet
Date: Fri, 2 Oct 2020 15:52:39 +0000 (+0000)
Subject: Document that HTTPS and SSL_TLS_SNI environment variables are always defined, regardl...
X-Git-Tag: 2.5.0-alpha2-ci-test-only~1197
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4c1276bf618f9d341161e84cc7240c9515ef7ea8;p=thirdparty%2Fapache%2Fhttpd.git
Document that HTTPS and SSL_TLS_SNI environment variables are always defined, regardless of 'SSLOptions StdEnvVars' .
Fix some small style issues to improve syntax hightlight.
PR 64783.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1882199 13f79535-47bb-0310-9956-ffa450edef68
---
diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml
index 2452811cf0b..bbb0123b43a 100644
--- a/docs/manual/mod/mod_ssl.xml
+++ b/docs/manual/mod/mod_ssl.xml
@@ -43,21 +43,23 @@ to provide the cryptographic engine.
Environment Variables
This module can be configured to provide several items of SSL information
-as additional environment variables to the SSI and CGI namespace. This
+as additional environment variables to the SSI and CGI namespace. Except for
+HTTPS and SSL_TLS_SNI which are always defined, this
information is not provided by default for performance reasons. (See
-SSLOptions StdEnvVars, below.) The generated variables
+SSLOptions StdEnvVars, below)
+The generated variables
are listed in the table below. For backward compatibility the information can
be made available under different names, too. Look in the Compatibility chapter for details on the
compatibility variables.
-
+
- | Variable Name: |
- Value Type: |
- Description: |
+ Variable Name |
+ Value Type |
+ Description |
HTTPS | flag | HTTPS is being used. |
SSL_PROTOCOL | string | The SSL protocol version (SSLv3, TLSv1, TLSv1.1, TLSv1.2) |
@@ -1484,10 +1486,10 @@ SSLSRPUnknownUserSeed "secret"
This directive can be used to control various run-time options on a
-per-directory basis. Normally, if multiple SSLOptions
+per-directory basis. Normally, if multiple SSLOptions
could apply to a directory, then the most specific one is taken
completely; the options are not merged. However if all the
-options on the SSLOptions directive are preceded by a
+options on the SSLOptions directive are preceded by a
plus (+) or minus (-) symbol, the options
are merged. Any options preceded by a + are added to the
options currently in force, and any options preceded by a
@@ -1547,8 +1549,8 @@ The available options are:
StrictRequire
- This forces forbidden access when SSLRequireSSL or
- SSLRequire successfully decided that access should be
+ This forces forbidden access when SSLRequireSSL or
+ SSLRequire successfully decided that access should be
forbidden. Usually the default is that in the case where a ``Satisfy
any'' directive is used, and other access restrictions are passed,
denial of access due to SSLRequireSSL or