diff options
| author | Jean-Frederic Clere <jfclere@apache.org> | 2017-02-03 18:15:05 +0100 |
|---|---|---|
| committer | Jean-Frederic Clere <jfclere@apache.org> | 2017-02-03 18:15:05 +0100 |
| commit | 7588e207b6934fc90665a61cda326318b40ae947 (patch) | |
| tree | 1031b74db49273bbadce18859fa4ac25473e5256 /docs/manual/mod/mod_ssl.xml | |
| parent | Add back the file I removed in r1781575. (diff) | |
| download | apache2-7588e207b6934fc90665a61cda326318b40ae947.tar.xz apache2-7588e207b6934fc90665a61cda326318b40ae947.zip | |
Add missing documentation for r1781575
Fix for PR 46037
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1781580 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'docs/manual/mod/mod_ssl.xml')
| -rw-r--r-- | docs/manual/mod/mod_ssl.xml | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index 836c7d4065..75106e4e7e 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -2425,6 +2425,37 @@ Responder), this option should be turned <code>off</code>.</p> </directivesynopsis> <directivesynopsis> +<name>SSLOCSPNoverify</name> +<description>skip the OCSP responder certificates verification</description> +<syntax>SSLOCSPNoverify <em>On/Off</em></syntax> +<default>SSLOCSPNoverify Off</default> +<contextlist><context>server config</context> +<context>virtual host</context></contextlist> +<compatibility>Available in httpd 2.5 and later, if using OpenSSL 0.9.7 or later</compatibility> +<usage> +<p>Skip the OCSP responder certificates verification, mostly useful when +testing an OCSP server.</p> +</usage> +</directivesynopsis> + + +<directivesynopsis> +<name>SSLOCSPResponderCertificateFile</name> +<description>Set of trusted PEM encoded OCSP responder certificates</description> +<syntax>SSLOCSPResponderCertificateFile <em>file</em></syntax> +<contextlist><context>server config</context> +<context>virtual host</context></contextlist> +<compatibility>Available in httpd 2.5 and later, if using OpenSSL 0.9.7 or later</compatibility> +<usage> +<p>This supplies a list of trusted OCSP responder certificates to be used +during OCSP responder certificate validation. The supplied certificates are +implicitly trusted without any further validation. This is typically used +where the OCSP responder certificate is self signed or omitted from the OCSP +response.</p> +</usage> +</directivesynopsis> + +<directivesynopsis> <name>SSLOCSPProxyURL</name> <description>Proxy URL to use for OCSP requests</description> <syntax>SSLOCSPProxyURL <em>url</em></syntax> |