expr
+SetEnvIfExpr expr
[!]env-variable[=value]
- [[!]env-variable[=value]] ... | | svdh | B |
Sets environment variables based on an ap_expr expression |
-SetEnvIfNoCase attribute regex
+ [[!]env-variable[=value]] ... | | svdh | B |
Sets environment variables based on an ap_expr expression |
+SetEnvIfNoCase attribute regex
[!]env-variable[=value]
- [[!]env-variable[=value]] ... | | svdh | B |
Sets environment variables based on attributes of the request
+ [[!]env-variable[=value]] ... | | svdh | B |
Sets environment variables based on attributes of the request
without respect to case |
-SetHandler Handlername|None | | svdh | C |
Erzwingt die Verarbeitung aller passenden Dateien durch
+ |
SetHandler Handlername|None | | svdh | C |
Erzwingt die Verarbeitung aller passenden Dateien durch
einen Handler |
-SetInputFilter Filter[;Filter...] | | svdh | C |
Bestimmt die Filter, die Client-Anfragen und POST-Eingaben
+ |
SetInputFilter Filter[;Filter...] | | svdh | C |
Bestimmt die Filter, die Client-Anfragen und POST-Eingaben
verarbeiten |
-SetOutputFilter Filter[;Filter...] | | svdh | C |
Bestimmt die Filter, die Antworten des Servers verarbeiten |
-SSIEndTag tag | "-->" | sv | B |
String that ends an include element |
-SSIErrorMsg message | "[an error occurred + | svdh | B |
Error message displayed when there is an SSI
+ |
SetOutputFilter Filter[;Filter...] | | svdh | C |
Bestimmt die Filter, die Antworten des Servers verarbeiten |
+SSIEndTag tag | "-->" | sv | B |
String that ends an include element |
+SSIErrorMsg message | "[an error occurred + | svdh | B |
Error message displayed when there is an SSI
error |
-SSIETag on|off | off | dh | B |
Controls whether ETags are generated by the server. |
-SSILastModified on|off | off | dh | B |
Controls whether Last-Modified headers are generated by the
+ |
SSIETag on|off | off | dh | B |
Controls whether ETags are generated by the server. |
+SSILastModified on|off | off | dh | B |
Controls whether Last-Modified headers are generated by the
server. |
-SSILegacyExprParser on|off | off | dh | B |
Enable compatibility mode for conditional expressions. |
-SSIStartTag tag | "<!--#" | sv | B |
String that starts an include element |
-SSITimeFormat formatstring | "%A, %d-%b-%Y %H:%M + | svdh | B |
Configures the format in which date strings are
+ |
SSILegacyExprParser on|off | off | dh | B |
Enable compatibility mode for conditional expressions. |
+SSIStartTag tag | "<!--#" | sv | B |
String that starts an include element |
+SSITimeFormat formatstring | "%A, %d-%b-%Y %H:%M + | svdh | B |
Configures the format in which date strings are
displayed |
-SSIUndefinedEcho string | "(none)" | svdh | B |
String displayed when an unset variable is echoed |
-SSLCACertificateFile file-path | | sv | E |
File of concatenated PEM-encoded CA Certificates
+ |
SSIUndefinedEcho string | "(none)" | svdh | B |
String displayed when an unset variable is echoed |
+SSLCACertificateFile file-path | | sv | E |
File of concatenated PEM-encoded CA Certificates
for Client Auth |
-SSLCACertificatePath directory-path | | sv | E |
Directory of PEM-encoded CA Certificates for
+ |
SSLCACertificatePath directory-path | | sv | E |
Directory of PEM-encoded CA Certificates for
Client Auth |
-SSLCADNRequestFile file-path | | sv | E |
File of concatenated PEM-encoded CA Certificates
+ |
SSLCADNRequestFile file-path | | sv | E |
File of concatenated PEM-encoded CA Certificates
for defining acceptable CA names |
-SSLCADNRequestPath directory-path | | sv | E |
Directory of PEM-encoded CA Certificates for
+ |
SSLCADNRequestPath directory-path | | sv | E |
Directory of PEM-encoded CA Certificates for
defining acceptable CA names |
-SSLCARevocationCheck chain|leaf|none | none | sv | E |
Enable CRL-based revocation checking |
-SSLCARevocationFile file-path | | sv | E |
File of concatenated PEM-encoded CA CRLs for
+ |
SSLCARevocationCheck chain|leaf|none | none | sv | E |
Enable CRL-based revocation checking |
+SSLCARevocationFile file-path | | sv | E |
File of concatenated PEM-encoded CA CRLs for
Client Auth |
-SSLCARevocationPath directory-path | | sv | E |
Directory of PEM-encoded CA CRLs for
+ |
SSLCARevocationPath directory-path | | sv | E |
Directory of PEM-encoded CA CRLs for
Client Auth |
-SSLCertificateChainFile file-path | | sv | E |
File of PEM-encoded Server CA Certificates |
-SSLCertificateFile file-path | | sv | E |
Server PEM-encoded X.509 Certificate file |
-SSLCertificateKeyFile file-path | | sv | E |
Server PEM-encoded Private Key file |
-SSLCipherSuite cipher-spec | DEFAULT (depends on + | svdh | E |
Cipher Suite available for negotiation in SSL
+ |
SSLCertificateChainFile file-path | | sv | E |
File of PEM-encoded Server CA Certificates |
+SSLCertificateFile file-path | | sv | E |
Server PEM-encoded X.509 certificate data file |
+SSLCertificateKeyFile file-path | | sv | E |
Server PEM-encoded private key file |
+SSLCipherSuite cipher-spec | DEFAULT (depends on + | svdh | E |
Cipher Suite available for negotiation in SSL
handshake |
-SSLCompression on|off | off | sv | E |
Enable compression on the SSL level |
-SSLCryptoDevice engine | builtin | s | E |
Enable use of a cryptographic hardware accelerator |
-SSLEngine on|off|optional | off | sv | E |
SSL Engine Operation Switch |
-SSLFIPS on|off | off | s | E |
SSL FIPS mode Switch |
-SSLHonorCipherOrder flag | | sv | E |
Option to prefer the server's cipher preference order |
-SSLInsecureRenegotiation flag | off | sv | E |
Option to enable support for insecure renegotiation |
-SSLOCSDefaultResponder uri | | sv | E |
Set the default responder URI for OCSP validation |
-SSLOCSPEnable flag | | sv | E |
Enable OCSP validation of the client certificate chain |
-SSLOCSPOverrideResponder flag | | sv | E |
Force use of the default responder URI for OCSP validation |
-SSLOCSPResponderTimeout seconds | 10 | sv | E |
Timeout for OCSP queries |
-SSLOCSPResponseMaxAge seconds | -1 | sv | E |
Maximum allowable age for OCSP responses |
-SSLOCSPResponseTimeSkew seconds | 300 | sv | E |
Maximum allowable time skew for OCSP response validation |
-SSLOptions [+|-]option ... | | svdh | E |
Configure various SSL engine run-time options |
-SSLPassPhraseDialog type | builtin | s | E |
Type of pass phrase dialog for encrypted private
+ |
SSLCompression on|off | off | sv | E |
Enable compression on the SSL level |
+SSLCryptoDevice engine | builtin | s | E |
Enable use of a cryptographic hardware accelerator |
+SSLEngine on|off|optional | off | sv | E |
SSL Engine Operation Switch |
+SSLFIPS on|off | off | s | E |
SSL FIPS mode Switch |
+SSLHonorCipherOrder on|off | off | sv | E |
Option to prefer the server's cipher preference order |
+SSLInsecureRenegotiation on|off | off | sv | E |
Option to enable support for insecure renegotiation |
+SSLOCSDefaultResponder uri | | sv | E |
Set the default responder URI for OCSP validation |
+SSLOCSPEnable on|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
+SSLOCSPOverrideResponder on|off | off | sv | E |
Force use of the default responder URI for OCSP validation |
+SSLOCSPResponderTimeout seconds | 10 | sv | E |
Timeout for OCSP queries |
+SSLOCSPResponseMaxAge seconds | -1 | sv | E |
Maximum allowable age for OCSP responses |
+SSLOCSPResponseTimeSkew seconds | 300 | sv | E |
Maximum allowable time skew for OCSP response validation |
+SSLOCSPUseRequestNonce on|off | on | sv | E |
Use a nonce within OCSP queries |
+SSLOpenSSLConfCmd command-name command-value | | sv | E |
Configure OpenSSL parameters through its SSL_CONF API |
+SSLOptions [+|-]option ... | | svdh | E |
Configure various SSL engine run-time options |
+SSLPassPhraseDialog type | builtin | s | E |
Type of pass phrase dialog for encrypted private
keys |
-SSLProtocol [+|-]protocol ... | all | sv | E |
Configure usable SSL/TLS protocol versions |
-SSLProxyCACertificateFile file-path | | sv | E |
File of concatenated PEM-encoded CA Certificates
+ |
SSLProtocol [+|-]protocol ... | all -SSLv3 | sv | E |
Configure usable SSL/TLS protocol versions |
+SSLProxyCACertificateFile file-path | | sv | E |
File of concatenated PEM-encoded CA Certificates
for Remote Server Auth |
-SSLProxyCACertificatePath directory-path | | sv | E |
Directory of PEM-encoded CA Certificates for
+ |
SSLProxyCACertificatePath directory-path | | sv | E |
Directory of PEM-encoded CA Certificates for
Remote Server Auth |
-SSLProxyCARevocationCheck chain|leaf|none | none | sv | E |
Enable CRL-based revocation checking for Remote Server Auth |
-SSLProxyCARevocationFile file-path | | sv | E |
File of concatenated PEM-encoded CA CRLs for
+ |
SSLProxyCARevocationCheck chain|leaf|none | none | sv | E |
Enable CRL-based revocation checking for Remote Server Auth |
+SSLProxyCARevocationFile file-path | | sv | E |
File of concatenated PEM-encoded CA CRLs for
Remote Server Auth |
-SSLProxyCARevocationPath directory-path | | sv | E |
Directory of PEM-encoded CA CRLs for
+ |
SSLProxyCARevocationPath directory-path | | sv | E |
Directory of PEM-encoded CA CRLs for
Remote Server Auth |
-SSLProxyCheckPeerCN on|off | on | sv | E |
Whether to check the remote server certificate's CN field
+ |
SSLProxyCheckPeerCN on|off | on | sv | E |
Whether to check the remote server certificate's CN field
|
-SSLProxyCheckPeerExpire on|off | on | sv | E |
Whether to check if remote server certificate is expired
+ |
SSLProxyCheckPeerExpire on|off | on | sv | E |
Whether to check if remote server certificate is expired
|
-SSLProxyCheckPeerName on|off | on | sv | E |
Configure host name checking for remote server certificates
+ |
SSLProxyCheckPeerName on|off | on | sv | E |
Configure host name checking for remote server certificates
|
-SSLProxyCipherSuite cipher-spec | ALL:!ADH:RC4+RSA:+H + | svdh | E |
Cipher Suite available for negotiation in SSL
+ |
SSLProxyCipherSuite cipher-spec | ALL:!ADH:RC4+RSA:+H + | svdh | E |
Cipher Suite available for negotiation in SSL
proxy handshake |
-SSLProxyEngine on|off | off | sv | E |
SSL Proxy Engine Operation Switch |
-SSLProxyMachineCertificateChainFile filename | | s | E |
File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate |
-SSLProxyMachineCertificateFile filename | | s | E |
File of concatenated PEM-encoded client certificates and keys to be used by the proxy |
-SSLProxyMachineCertificatePath directory | | s | E |
Directory of PEM-encoded client certificates and keys to be used by the proxy |
-SSLProxyProtocol [+|-]protocol ... | all | sv | E |
Configure usable SSL protocol flavors for proxy usage |
-SSLProxyVerify level | none | sv | E |
Type of remote server Certificate verification |
-SSLProxyVerifyDepth number | 1 | sv | E |
Maximum depth of CA Certificates in Remote Server
+ |
SSLProxyEngine on|off | off | sv | E |
SSL Proxy Engine Operation Switch |
+SSLProxyMachineCertificateChainFile filename | | s | E |
File of concatenated PEM-encoded CA certificates to be used by the proxy for choosing a certificate |
+SSLProxyMachineCertificateFile filename | | s | E |
File of concatenated PEM-encoded client certificates and keys to be used by the proxy |
+SSLProxyMachineCertificatePath directory | | s | E |
Directory of PEM-encoded client certificates and keys to be used by the proxy |
+SSLProxyProtocol [+|-]protocol ... | all -SSLv3 | sv | E |
Configure usable SSL protocol flavors for proxy usage |
+SSLProxyVerify level | none | sv | E |
Type of remote server Certificate verification |
+SSLProxyVerifyDepth number | 1 | sv | E |
Maximum depth of CA Certificates in Remote Server
Certificate verification |
-SSLRandomSeed context source
-[bytes] | | s | E |
Pseudo Random Number Generator (PRNG) seeding
+ |
SSLRandomSeed context source
+[bytes] | | s | E |
Pseudo Random Number Generator (PRNG) seeding
source |
-SSLRenegBufferSize bytes | 131072 | dh | E |
Set the size for the SSL renegotiation buffer |
-SSLRequire expression | | dh | E |
Allow access only when an arbitrarily complex
+ |
SSLRenegBufferSize bytes | 131072 | dh | E |
Set the size for the SSL renegotiation buffer |
+SSLRequire expression | | dh | E |
Allow access only when an arbitrarily complex
boolean expression is true |
-SSLRequireSSL | | dh | E |
Deny access when SSL is not used for the
+ |
SSLRequireSSL | | dh | E |
Deny access when SSL is not used for the
HTTP request |
-SSLSessionCache type | none | s | E |
Type of the global/inter-process SSL Session
+ |
SSLSessionCache type | none | s | E |
Type of the global/inter-process SSL Session
Cache |
-SSLSessionCacheTimeout seconds | 300 | sv | E |
Number of seconds before an SSL session expires
+ |
SSLSessionCacheTimeout seconds | 300 | sv | E |
Number of seconds before an SSL session expires
in the Session Cache |
-SSLSessionTicketKeyFile file-path | | sv | E |
Persistent encryption/decryption key for TLS session tickets |
+SSLSessionTicketKeyFile file-path | | sv | E |
Persistent encryption/decryption key for TLS session tickets |
+SSLSessionTickets on|off | on | sv | E |
Enable or disable use of TLS session tickets |
SSLSRPUnknownUserSeed secret-string | | sv | E |
SRP unknown user seed |
SSLSRPVerifierFile file-path | | sv | E |
Path to SRP verifier file |
SSLStaplingCache type | | s | E |
Configures the OCSP stapling cache |
@@ -1033,6 +1120,8 @@ Certificate verification