From: Eric Covener Date: Wed, 4 Apr 2012 00:58:48 +0000 (+0000) Subject: Merge r1309193 from trunk: X-Git-Tag: 2.4.2~8 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=24fd555f5560938b176eb825124181b64d0c5de2;p=apache Merge r1309193 from trunk: PR50662: reword the hint about sslrequire expressions being parsed in htaccess so it doesn't apply non-perdir config. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1309194 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml index 992757f2c7..91750fd161 100644 --- a/docs/manual/mod/mod_ssl.xml +++ b/docs/manual/mod/mod_ssl.xml @@ -1360,12 +1360,12 @@ href="#envvars">Environment Variables can be used. For funcname the available functions are listed in the ap_expr documentation.

-

Notice that expression is first parsed into an internal machine -representation and then evaluated in a second step. Actually, in Global and -Per-Server Class context expression is parsed at startup time and -at runtime only the machine representation is executed. For Per-Directory -context, specifically in a .htaccess context, this is different: here -expression has to be parsed and immediately executed for every request.

+

The expression is parsed into an internal machine +representation when the configuration is loaded, and then evaluated +during request processing. In .htaccess context, the expression is +both parsed and executed each time the .htaccess file is encountered during +request processing.

+ Example
SSLRequire (    %{SSL_CIPHER} !~ m/^(EXP|NULL)-/                \
             and %{SSL_CLIENT_S_DN_O} eq "Snake Oil, Ltd."        \