diff options
| author | Stefan Eissing <icing@apache.org> | 2017-09-08 12:29:53 +0200 |
|---|---|---|
| committer | Stefan Eissing <icing@apache.org> | 2017-09-08 12:29:53 +0200 |
| commit | 55956ee61970398d45d0171763f4d46b76a1910a (patch) | |
| tree | 2eca6c218b1c4ddc35c8f599e6549501d41933d0 /docs/manual/mod/mod_ssl.xml | |
| parent | core: Disallow Methods' registration at run time (.htaccess), they may be (diff) | |
| download | apache2-55956ee61970398d45d0171763f4d46b76a1910a.tar.xz apache2-55956ee61970398d45d0171763f4d46b76a1910a.zip | |
On the trunk:
mod_ssl: Extending SSLEngine to alternatively get a list of add:port spec as used in VirtualHost.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1807709 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'docs/manual/mod/mod_ssl.xml')
| -rw-r--r-- | docs/manual/mod/mod_ssl.xml | 18 |
1 files changed, 15 insertions, 3 deletions
diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index 90aa076664..87538c0a0d 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -550,15 +550,15 @@ SSLSessionCacheTimeout 600 <directivesynopsis> <name>SSLEngine</name> <description>SSL Engine Operation Switch</description> -<syntax>SSLEngine on|off|optional</syntax> +<syntax>SSLEngine on|off|optional|addr[:port] [addr[:port]] ...</syntax> <default>SSLEngine off</default> <contextlist><context>server config</context> <context>virtual host</context></contextlist> <usage> <p> -This directive toggles the usage of the SSL/TLS Protocol Engine. This -is should be used inside a <directive module="core" +This directive toggles the usage of the SSL/TLS Protocol Engine. Values 'on', +'off' and 'optional' should be used inside a <directive module="core" type="section">VirtualHost</directive> section to enable SSL/TLS for a that virtual host. By default the SSL/TLS Protocol Engine is disabled for both the main server and all configured virtual hosts.</p> @@ -570,6 +570,18 @@ SSLEngine on </VirtualHost> </highlight> </example> +<p>In Apache 2.4 and later, addr:port values should be used in the +global server to enable the SSL/TLS Protocol Engine for <em>all</em> +<directive module="core" type="section">VirtualHost</directive>s +that match one of the addresses in the list.</p> +<example><title>Example</title> +<highlight language="config"> +SSLEngine *:443 +<VirtualHost *:443> +#... +</VirtualHost> +</highlight> +</example> <p>In Apache 2.1 and later, <directive>SSLEngine</directive> can be set to <code>optional</code>. This enables support for <a href="http://www.ietf.org/rfc/rfc2817.txt">RFC 2817</a>, Upgrading to TLS |