From: Jim Jagielski
internal
+nonenotnull
This disables any global/inter-process Session Cache. However - it does allow OpenSSL to use its own internal session cache. This in - mainly useful in situations where a global cache cannot be used - but the client requires a non-null session ID.
dbm:/path/to/datafile
diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml
index c93e5b1918..a184e85f66 100644
--- a/docs/manual/mod/mod_ssl.xml
+++ b/docs/manual/mod/mod_ssl.xml
@@ -412,12 +412,11 @@ The following four storage types are currently supported:
using certain browsers, particularly if client certificates are
enabled. This setting is not recommended.internal
+nonenotnull
This disables any global/inter-process Session Cache. However - it does allow OpenSSL to use its own internal session cache. This in - mainly useful in situations where a global cache cannot be used - but the client requires a non-null session ID.
dbm:/path/to/datafile
diff --git a/modules/ssl/mod_ssl.c b/modules/ssl/mod_ssl.c
index 66017302e6..0fcbd52283 100644
--- a/modules/ssl/mod_ssl.c
+++ b/modules/ssl/mod_ssl.c
@@ -83,7 +83,7 @@ static const command_rec ssl_config_cmds[] = {
"or `exec:/path/to/cgi_program')")
SSL_CMD_SRV(SessionCache, TAKE1,
"SSL Session Cache storage "
- "(`none', `internal', `dbm:/path/to/file')")
+ "(`none', `nonenotnull', `dbm:/path/to/file')")
#if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT)
SSL_CMD_SRV(CryptoDevice, TAKE1,
"SSL external Crypto Device usage "
diff --git a/modules/ssl/ssl_engine_config.c b/modules/ssl/ssl_engine_config.c
index 304516021b..a28d3bafa5 100644
--- a/modules/ssl/ssl_engine_config.c
+++ b/modules/ssl/ssl_engine_config.c
@@ -1001,8 +1001,8 @@ const char *ssl_cmd_SSLSessionCache(cmd_parms *cmd,
mc->nSessionCacheMode = SSL_SCMODE_NONE;
mc->szSessionCacheDataFile = NULL;
}
- else if (strcEQ(arg, "internal")) {
- mc->nSessionCacheMode = SSL_SCMODE_OPENSSL_INTERNAL;
+ else if (strcEQ(arg, "nonenotnull")) {
+ mc->nSessionCacheMode = SSL_SCMODE_NONE_NOT_NULL;
mc->szSessionCacheDataFile = NULL;
}
else if ((arglen > 4) && strcEQn(arg, "dbm:", 4)) {
diff --git a/modules/ssl/ssl_private.h b/modules/ssl/ssl_private.h
index 02cebee1fc..fcaa8204e3 100644
--- a/modules/ssl/ssl_private.h
+++ b/modules/ssl/ssl_private.h
@@ -260,7 +260,7 @@ typedef enum {
SSL_SCMODE_DBM = 1,
SSL_SCMODE_SHMCB = 3,
SSL_SCMODE_DC = 4,
- SSL_SCMODE_OPENSSL_INTERNAL = 5
+ SSL_SCMODE_NONE_NOT_NULL = 5
} ssl_scmode_t;
/*