From 4e3429865251d643a998dbcb15c1dd48728d9330 Mon Sep 17 00:00:00 2001
From: Eric Covener
Date: Sat, 17 Sep 2016 13:13:46 +0000
Subject: [PATCH] xform
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1761220 13f79535-47bb-0310-9956-ffa450edef68
---
docs/manual/mod/mod_ssl.html.en | 8 ++------
1 file changed, 2 insertions(+), 6 deletions(-)
diff --git a/docs/manual/mod/mod_ssl.html.en b/docs/manual/mod/mod_ssl.html.en
index f5442a66b9..a13cd48aea 100644
--- a/docs/manual/mod/mod_ssl.html.en
+++ b/docs/manual/mod/mod_ssl.html.en
@@ -2658,13 +2658,9 @@ The following levels are available for level:
the client has to present a valid Certificate
optional_no_ca:
the client may present a valid Certificate
- but it need not to be (successfully) verifiable.
+ but it need not to be (successfully) verifiable. This option
+ cannot be relied upon for client authentication.
-In practice only levels none and
-require are really interesting, because level
-optional doesn't work with all browsers and level
-optional_no_ca is actually against the idea of
-authentication (but can be used to establish SSL test pages, etc.)
Example
SSLVerifyClient require
--
2.49.0