From 5b7db64a3c21f2388beadfaa2ef67dc47a9fed55 Mon Sep 17 00:00:00 2001
From: Joe Orton
Date: Sat, 28 Feb 2004 23:36:14 +0000
Subject: [PATCH] Attempt to document the new cert DN lookup feature.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@102817 13f79535-47bb-0310-9956-ffa450edef68
---
docs/manual/mod/mod_ssl.xml | 12 ++++++++++--
1 file changed, 10 insertions(+), 2 deletions(-)
diff --git a/docs/manual/mod/mod_ssl.xml b/docs/manual/mod/mod_ssl.xml
index faac93a4f9..72f0afe7fb 100644
--- a/docs/manual/mod/mod_ssl.xml
+++ b/docs/manual/mod/mod_ssl.xml
@@ -87,9 +87,17 @@ compatibility variables.
SSL_SERVER_A_SIG | string | Algorithm used for the signature of server's certificate |
SSL_SERVER_A_KEY | string | Algorithm used for the public key of server's certificate |
SSL_SERVER_CERT | string | PEM-encoded server certificate |
-[ where x509 is a component of a X.509 DN:
- C,ST,L,O,OU,CN,T,I,G,S,D,UID,Email ] |
+
+x509 specifies a component of an X.509 DN; one of
+C,ST,L,O,OU,CN,T,I,G,S,D,UID,Email
. In Apache 2.1 and
+later, x509 may also include a numeric _n
+suffix. If the DN in question contains multiple attributes of the
+same name, this suffix is used as an index to select a particular
+attribute. For example, where the server certificate subject DN
+included two OU fields, SSL_SERVER_S_DN_OU_0
and
+SSL_SERVER_S_DN_OU_1
could be used to reference each.
+