From 7e96d1ca877c94dc0d8f5c6cdf9d02c332adbff8 Mon Sep 17 00:00:00 2001
From: Joe Orton
%{
name}c
'' cryptography format function
provided. Information about this function is provided in the Compatibility chapter.
--Example:
-
+
Example
CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
+EXP-ADH-RC4-MD5
SSLv3 DH(512) None RC4(40) MD5 export
Description: | Enable use of a cryptographic hardware accelerator |
---|---|
Syntax: | SSLCryptoDevice engine |
Default: | SSLCryptoDevice builtin |
Context: | server config |
Status: | Extension |
Module: | mod_ssl |
Compatibility: | Available if mod_ssl is built using -DSSL_ENGINE_EXPERIMENTAL |
+This directive enables use of a cryptographic hardware accelerator +board to offload some of the SSL processing overhead. This directive +can only be used if the SSL toolkit is built with "engine" support; +OpenSSL 0.9.7 and later releases have "engine" support by default, the +separate "-engine" releases of OpenSSL 0.9.6 must be used.
+ +To discover which engine names are supported, run the command
+"openssl engine
".
+# For a Broadcom accelerator:
+SSLCryptoDevice ubsec
+
Description: | Option to prefer the server's cipher preference order |
---|---|
Syntax: | SSLHonorCiperOrder flag |
Context: | server config, virtual host |
Status: | Extension |
Module: | mod_ssl |
Compatibility: | Available in Apache 2.1 and later, if using OpenSSL 0.9.7 or later |
When choosing a cipher during an SSLv3 or TLSv1 handshake, normally +the client's preference is used. If this directive is enabled, the +server's preference will be used instead.
+
+SSLHonorCipherOrder on
+
-Example:
-Currently there is no support for encrypted private keys
-Example: Currently there is no support for encrypted private keys
-Example:
-
This directive sets the "user" field in the Apache request object.
This is used by lower modules to identify the user with a character
string. In particular, this may cause the environment variable
-
+
Example
SSLPassPhraseDialog exec:/usr/local/apache/sbin/pp-filter
SSLProxyMachineCertificatePath
.
+
Example
SSLProxyMachineCertificateFile /usr/local/apache2/conf/ssl.crt/proxy.pem
+
Example
SSLProxyMachineCertificatePath /usr/local/apache2/conf/proxy.crt/
Compatibility: Available in Apache 2.1 and later REMOTE_USER
to be set. The varname
can be
+REMOTE_USER
to be set. The varname can be
any of the SSL environment variables.Example
SSLUserName SSL_CLIENT_S_DN_CN
diff --git a/docs/manual/mod/quickreference.html.en b/docs/manual/mod/quickreference.html.en
index 38f1290980..ae2f43b52f 100644
--- a/docs/manual/mod/quickreference.html.en
+++ b/docs/manual/mod/quickreference.html.en
@@ -635,7 +635,9 @@ Client Auth
SSLCertificateKeyFile file-path sv E Server PEM-encoded Private Key file SSLCipherSuite cipher-spec ALL:!ADH:RC4+RSA:+H + svdh E
-Cipher Suite available for negotiation in SSL
handshake SSLEngine on|off off sv E
+SSL Engine Operation Switch SSLCryptoDevice engine builtin s E
+Enable use of a cryptographic hardware accelerator SSLEngine on|off off sv E
+SSL Engine Operation Switch SSLHonorCiperOrder flag sv E Option to prefer the server's cipher preference order SSLMutex type none s E Semaphore for internal mutual exclusion of
operations SSLOptions [+|-]option ... svdh E
--
2.40.0
Configure various SSL engine run-time options