From d74e294d31209c0f7f2b738a647adb2c31cd85fc Mon Sep 17 00:00:00 2001
From: Luca Toscano
Date: Sun, 3 Dec 2017 10:04:21 +0000
Subject: [PATCH] mod_md.xml: (hopefully) clarify some directives usage
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1817023 13f79535-47bb-0310-9956-ffa450edef68
---
docs/manual/mod/mod_md.xml | 22 +++++++++++++---------
1 file changed, 13 insertions(+), 9 deletions(-)
diff --git a/docs/manual/mod/mod_md.xml b/docs/manual/mod/mod_md.xml
index 90e926a822..bcf237d069 100644
--- a/docs/manual/mod/mod_md.xml
+++ b/docs/manual/mod/mod_md.xml
@@ -80,7 +80,7 @@ ManagedDomain example.org
ManagedDomain
Define list of domain names that belong to one group.
- ManagedDomain dns-name [ other-dns-name... ]
+ ManagedDomain dns-name [ other-dns-name... ] [auto|manual]
server config
@@ -161,8 +161,8 @@ ManagedDomain example2.org auto
explicitly. Whenever you add more ServerAlias names to this
virtual host, they will be added as well to the Manged Domain.
- If this is too much automagic for you, define 'manual' mode.
- mod_md will then complain if the names do not match.
+ If you prefer to explicitly declare all the domain names, use 'manual' mode.
+ An error will be logged if the names do not match with the expected ones.
@@ -190,6 +190,10 @@ ManagedDomain example2.org auto
</ManagedDomain>
+ This is a specialized version of ManagedDomain,
+ it should be used only when a fine grained configuration is required.
+ ManagedDomain is the suggested choice
+ for the general use case.
@@ -276,8 +280,8 @@ MDCertificateAgreement https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2
This can be useful in clustered setups where you want just one node to perform
the driving.
- The third mode 'always' is like 'auto' only that mod_md will not
- check if the MD is actually used somewhere.
+ The third mode 'always' is like 'auto', with the difference that
+ mod_md will not check if the MD is actually used.
@@ -320,7 +324,7 @@ MDCertificateAgreement https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2
If you use it in the global context, outside a specific MD, you can only
specify one value, 'auto' or 'manual' as the default for all other MDs. See
- ManagedDomain for a
+ ManagedDomain for a
description of these special values.
@@ -581,9 +585,9 @@ MDRequireHttps permanent
- This tells mod_md which challenge types it shall use in
- which order when proving domain ownership. The names are protocol specific. The
- current ACME protocol version that Let's Encrypt speaks defines two challenge
+ Sets challenge types and their execution order when proving domain ownership.
+ The names are protocol specific.
+ The current ACME protocol version implemented by Let's Encrypt defines two challenge
types that are supported by mod_md. By default, it will try
the one on port 443 when available.
--
2.50.1