mirror of
https://github.com/apache/httpd.git
synced 2025-12-24 15:01:03 +03:00
Update a bunch of transformations.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@99071 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
@@ -454,9 +454,9 @@ Negotiation</a></li>
|
||||
Variant" or "Multiple Choices" response to the client. To avoid
|
||||
these error messages, it is possible to configure Apache to ignore
|
||||
the Accept-language in these cases and provide a document that
|
||||
does not explictly match the client's request. The <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code>
|
||||
does not explicitly match the client's request. The <code class="directive"><a href="./mod/mod_negotiation.html#forcelanguagepriority">ForceLanguagePriority</a></code>
|
||||
directive can be used to override one or both of these error
|
||||
messages and subsitute the servers judgement in the form of the
|
||||
messages and substitute the servers judgement in the form of the
|
||||
<code class="directive"><a href="./mod/mod_negotiation.html#languagepriority">LanguagePriority</a></code>
|
||||
directive.</p>
|
||||
|
||||
@@ -606,8 +606,8 @@ decimal places before choosing the best variant.</p>
|
||||
</tr>
|
||||
</table>
|
||||
|
||||
<p>Looking at the table above you will notice that it is always
|
||||
possible to use the name without any extensions in an hyperlink
|
||||
<p>Looking at the table above, you will notice that it is always
|
||||
possible to use the name without any extensions in a hyperlink
|
||||
(<em>e.g.</em>, <code>foo</code>). The advantage is that you
|
||||
can hide the actual type of a document rsp. file and can change
|
||||
it later, <em>e.g.</em>, from <code>html</code> to
|
||||
|
||||
@@ -116,7 +116,7 @@ File</a><br /> See: <a href="mod/directives.html">Directive
|
||||
Index</a></dd>
|
||||
|
||||
<dt><a name="dynamicsharedobject">Dynamic Shared Object</a> <a name="dso">(DSO)</a></dt> <dd><a href="#module">Modules</a> compiled
|
||||
seperately from the Apache httpd binary that can be loaded on-demand.<br />
|
||||
separately from the Apache httpd binary that can be loaded on-demand.<br />
|
||||
See: <a href="dso.html">Dynamic Shared Object Support</a></dd>
|
||||
|
||||
<dt><a name="environmentvariable">Environment Variable</a> <a name="env-variable">(env-variable)</a></dt>
|
||||
@@ -139,7 +139,7 @@ See: <a href="ssl/">SSL/TLS Encryption</a></dd>
|
||||
data that is sent or received by the server. Input filters process
|
||||
data sent by the client to the server, while output filters process
|
||||
documents on the server before they are sent to the client. For
|
||||
examle, the <code>INCLUDES</code> output filter processes documents
|
||||
example, the <code>INCLUDES</code> output filter processes documents
|
||||
for <a href="#ssi">Server Side Includes</a>.<br /> See: <a href="filter.html">Filters</a></dd>
|
||||
|
||||
<dt><a name="fully-qualifieddomain-name">Fully-Qualified
|
||||
@@ -177,7 +177,7 @@ See: <a href="configuring.html">Configuration Files</a></dd>
|
||||
<dt><a name="hypertexttransferprotocol">HyperText Transfer
|
||||
Protocol</a> <a name="http">(HTTP)</a></dt> <dd>The standard
|
||||
transmission protocol used on the World Wide Web. Apache implements
|
||||
version 1.1 of the protocol, refered to as HTTP/1.1 and defined by <a href="http://ietf.org/rfc/rfc2616.txt">RFC 2616</a>.</dd>
|
||||
version 1.1 of the protocol, referred to as HTTP/1.1 and defined by <a href="http://ietf.org/rfc/rfc2616.txt">RFC 2616</a>.</dd>
|
||||
|
||||
<dt><a name="https">HTTPS</a></dt>
|
||||
<dd>The HyperText Transport Protocol (Secure), the standard encrypted
|
||||
@@ -206,7 +206,7 @@ HTTP, the MIME-type is transmitted in the <code>Content-Type</code> <a href="#he
|
||||
program. Much of Apache's functionality is contained in modules that
|
||||
you can choose to include or exclude. Modules that are compiled into
|
||||
the Apache httpd binary are called <em>static modules</em>, while
|
||||
modules that are stored seperately and can be optionally loaded at
|
||||
modules that are stored separately and can be optionally loaded at
|
||||
run-time are called <em>dynamic modules</em> or <a href="#dso">DSOs</a>. Modules that are included by default are called
|
||||
<em>base modules</em>. Many modules are available for Apache that are
|
||||
not distributed as part of the Apache HTTP Server <a href="#tarball">tarball</a>. These are referred to as <em>third-party
|
||||
@@ -218,7 +218,7 @@ See: <a href="mod/">Module Index</a></dd>
|
||||
Module Magic Number is a constant defined in the Apache source code
|
||||
that is associated with binary compatibility of modules. It is changed
|
||||
when internal Apache structures, function calls and other significant
|
||||
parts of API change in such a way that binary compatiblity cannot be
|
||||
parts of API change in such a way that binary compatibility cannot be
|
||||
guaranteed any more. On MMN change, all third party modules have to be
|
||||
at least recompiled, sometimes even slightly changed in order to work
|
||||
with the new version of Apache.
|
||||
@@ -250,7 +250,7 @@ can deliver that content from its cache, rather than requesting it
|
||||
from the origin server each time, thereby reducing response time.<br />
|
||||
See: <a href="mod/mod_proxy.html">mod_proxy</a></dd>
|
||||
|
||||
<dt><a name="publickey">Public Key</a></dt> <dd>The publically
|
||||
<dt><a name="publickey">Public Key</a></dt> <dd>The publicly
|
||||
available key in a <a name="publickeycryptography">Public Key
|
||||
Cryptography</a> system, used to encrypt messages bound for its owner
|
||||
and to decrypt signatures made by its owner.<br />
|
||||
@@ -260,7 +260,7 @@ See: <a href="ssl/">SSL/TLS Encryption</a></dd>
|
||||
<dd>The study and application of asymmetric encryption systems, which
|
||||
use one key for encryption and another for decryption. A corresponding
|
||||
pair of such keys constitutes a key pair. Also called Asymmetric
|
||||
Crypography.<br /> See: <a href="ssl/">SSL/TLS Encryption</a></dd>
|
||||
Cryptography.<br /> See: <a href="ssl/">SSL/TLS Encryption</a></dd>
|
||||
|
||||
<dt><a name="regularexpresion">Regular Expression</a> <a name="regex">(Regex)</a></dt> <dd>A way of
|
||||
describing a pattern in text - for example, "all the words that begin with the
|
||||
|
||||
@@ -518,12 +518,12 @@
|
||||
<dt><code>--with-berkeley-db[=<em>path</em>]</code></dt>
|
||||
|
||||
<dd>If no <em>path</em> is specified, Apache will search for the
|
||||
include files and libraries in the usual search paths. An explict
|
||||
include files and libraries in the usual search paths. An explicit
|
||||
<em>path</em> will cause Apache to look in
|
||||
<em>path</em><code>/lib</code> and
|
||||
<em>path</em><code>/include</code> for the relevant files. Finally,
|
||||
the <em>path</em> may specify specific include and library paths
|
||||
seperated by a colon.</dd>
|
||||
separated by a colon.</dd>
|
||||
</dl>
|
||||
|
||||
|
||||
|
||||
@@ -19,7 +19,7 @@
|
||||
<a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP Server</a> > <a href="http://httpd.apache.org/docs-project/">Documentation</a> > <a href="./">Version 2.1</a></div><div id="page-content"><div id="preamble"><h1>Log Files</h1>
|
||||
<p>In order to effectively manage a web server, it is necessary
|
||||
to get feedback about the activity and performance of the
|
||||
server as well as any problems that may be occuring. The Apache
|
||||
server as well as any problems that may be occurring. The Apache
|
||||
HTTP Server provides very comprehensive and flexible logging
|
||||
capabilities. This document describes how to configure its
|
||||
logging capabilities, and how to understand what the logs
|
||||
@@ -303,7 +303,7 @@
|
||||
<div class="example"><p><code>
|
||||
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\"
|
||||
\"%{User-agent}i\"" combined<br />
|
||||
CustomLog log/acces_log combined
|
||||
CustomLog log/access_log combined
|
||||
</code></p></div>
|
||||
|
||||
<p>This format is exactly the same as the Common Log Format,
|
||||
|
||||
@@ -1159,7 +1159,7 @@ once!
|
||||
<tr><th><a href="directive-dict.html#Override">Override:</a></th><td>FileInfo</td></tr>
|
||||
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr>
|
||||
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_rewrite</td></tr>
|
||||
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td><code>MaxRedirects</code> is available in Apache 2.1 and
|
||||
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td><code>MaxRedirects</code> is available in Apache 2.0.45 and
|
||||
later</td></tr>
|
||||
</table>
|
||||
|
||||
|
||||
@@ -4,32 +4,67 @@
|
||||
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
|
||||
This file is generated from xml source: DO NOT EDIT
|
||||
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
|
||||
--><title>mod_suexec - Apache HTTP $B%5!<%P(B</title><link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" /><link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" /><link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link href="../images/favicon.ico" rel="shortcut icon" /></head><body><div id="page-header"><p class="menu"><a href="../mod/">$B%b%8%e!<%k(B</a> | <a href="../mod/directives.html">$B%G%#%l%/%F%#%V(B</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">$BMQ8l(B</a> | <a href="../sitemap.html">$B%5%$%H%^%C%W(B</a></p><p class="apache">Apache HTTP $B%5!<%P(B $B%P!<%8%g%s(B 2.0</p><img alt="" src="../images/feather.gif" /></div><div class="up"><a href="./"><img title="<-" alt="<-" src="../images/left.gif" /></a></div><div id="path"><a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP $B%5!<%P(B</a> > <a href="http://httpd.apache.org/docs-project/">$B%I%-%e%a%s%F!<%7%g%s(B</a> > <a href="../">$B%P!<%8%g%s(B 2.0</a> > <a href="./">$B%b%8%e!<%k(B</a></div><div id="page-content"><div id="preamble"><h1>Apache $B%b%8%e!<%k(B mod_suexec</h1><table class="module"><tr><th><a href="module-dict.html#Description">$B@bL@(B:
|
||||
</a></th><td>$B;XDj$5$l$?%f!<%6$H%0%k!<%W$G(B CGI $B%9%/%j%W%H$r<B9T$9$k(B</td></tr><tr><th><a href="module-dict.html#Status">$B%9%F!<%?%9(B:
|
||||
</a></th><td>$B3HD%(B</td></tr><tr><th><a href="module-dict.html#ModuleIdentifier">$B%b%8%e!<%k<1JL;R(B:
|
||||
</a></th><td>suexec_module</td></tr><tr><th><a href="module-dict.html#SourceFile">$B%=!<%9%U%!%$(B$B%k(B:
|
||||
</a></th><td>mod_suexec.c</td></tr><tr><th><a href="module-dict.html#Compatibility">$B8_49@-(B:
|
||||
</a></th><td>Apache 2.0 $B0J9_$G;HMQ2DG=(B</td></tr></table><h3>$B35MW(B</h3>
|
||||
-->
|
||||
<title>mod_suexec - Apache HTTP $B%5!<%P(B</title>
|
||||
<link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
|
||||
<link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
|
||||
<link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" />
|
||||
<link href="../images/favicon.ico" rel="shortcut icon" /></head>
|
||||
<body>
|
||||
<div id="page-header">
|
||||
<p class="menu"><a href="../mod/">$B%b%8%e!<%k(B</a> | <a href="../mod/directives.html">$B%G%#%l%/%F%#%V(B</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">$BMQ8l(B</a> | <a href="../sitemap.html">$B%5%$%H%^%C%W(B</a></p>
|
||||
<p class="apache">Apache HTTP $B%5!<%P(B $B%P!<%8%g%s(B 2.1</p>
|
||||
<img alt="" src="../images/feather.gif" /></div>
|
||||
<div class="up"><a href="./"><img title="<-" alt="<-" src="../images/left.gif" /></a></div>
|
||||
<div id="path">
|
||||
<a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP $B%5!<%P(B</a> > <a href="http://httpd.apache.org/docs-project/">$B%I%-%e%a%s%F!<%7%g%s(B</a> > <a href="../">$B%P!<%8%g%s(B 2.1</a> > <a href="./">$B%b%8%e!<%k(B</a></div>
|
||||
<div id="page-content">
|
||||
<div id="preamble"><h1>Apache $B%b%8%e!<%k(B mod_suexec</h1>
|
||||
<table class="module"><tr><th><a href="module-dict.html#Description">$B@bL@(B:</a></th><td>$B;XDj$5$l$?%f!<%6$H%0%k!<%W$G(B CGI $B%9%/%j%W%H$r<B9T$9$k(B</td></tr>
|
||||
<tr><th><a href="module-dict.html#Status">$B%9%F!<%?%9(B:</a></th><td>$B3HD%(B</td></tr>
|
||||
<tr><th><a href="module-dict.html#ModuleIdentifier">$B%b%8%e!<%k<1JL;R(B:</a></th><td>suexec_module</td></tr>
|
||||
<tr><th><a href="module-dict.html#SourceFile">$B%=!<%9%U%!%$%k(B:</a></th><td>mod_suexec.c</td></tr>
|
||||
<tr><th><a href="module-dict.html#Compatibility">$B8_49@-(B:</a></th><td>Apache 2.0 $B0J9_$G;HMQ2DG=(B</td></tr></table>
|
||||
<h3>$B35MW(B</h3>
|
||||
|
||||
<p>$B$3$N%b%8%e!<%k$H(B <a href="../programs/suexec.html">suexec $B%5%]!<%H%W%m%0%i%`(B</a>
|
||||
$B$K$h$j!"(BCGI $B%9%/%j%W%H$,;XDj$5$l$?%f!<%6$H%0%k!<%W$G(B
|
||||
$B<B9T$5$l$k$h$&$K$G$-$^$9!#(B</p>
|
||||
</div><div id="quickview"><h3 class="directives">$B%G%#%l%/%F%#%V(B</h3><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#suexecusergroup">SuexecUserGroup</a></li>
|
||||
</ul><h3>$B;2(B$B>H(B</h3><ul class="seealso"><li><a href="../suexec.html">SuEXEC $B%5%]!<%H(B</a></li></ul></div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div><div class="directive-section"><h2><a name="SuexecUserGroup" id="SuexecUserGroup">SuexecUserGroup</a> <a name="suexecusergroup" id="suexecusergroup">$B%G(B$B%#%l%/%F%#%V(B</a></h2><table class="directive"><tr><th><a href="directive-dict.html#Description">$B@bL@(B:
|
||||
</a></th><td>CGI $B%W%m%0%i%`$N%f!<%6%Q!<%_%C%7%g%s!"%0%k!<%W%Q!<%_%C%7%g%s(B</td></tr><tr><th><a href="directive-dict.html#Syntax">$B9=J8(B:
|
||||
</a></th><td><code>SuexecUserGroup <em>User Group</em></code></td></tr><tr><th><a href="directive-dict.html#Context">$B%3%s%F%-%9%H(B:
|
||||
</a></th><td>$B%5!<%P@_Dj%U%!%$%k(B, $B%P!<%A%c%k%[%9%H(B</td></tr><tr><th><a href="directive-dict.html#Status">$B%9%F!<%?%9(B:
|
||||
</a></th><td>$B3HD%(B</td></tr><tr><th><a href="directive-dict.html#Module">$B%b%8%e!<%k(B:
|
||||
</a></th><td>mod_suexec</td></tr><tr><th><a href="directive-dict.html#Compatibility">$B8_49@-(B:
|
||||
</a></th><td>SuexecUserGroup $B$O(B 2.0 $B0J9_$G$N$_;HMQ2DG=!#(B</td></tr></table>
|
||||
</div>
|
||||
<div id="quickview"><h3 class="directives">$B%G%#%l%/%F%#%V(B</h3>
|
||||
<ul id="toc">
|
||||
<li><img alt="" src="../images/down.gif" /> <a href="#suexecusergroup">SuexecUserGroup</a></li>
|
||||
</ul>
|
||||
<h3>$B;2>H(B</h3>
|
||||
<ul class="seealso">
|
||||
<li><a href="../suexec.html">SuEXEC $B%5%]!<%H(B</a></li>
|
||||
</ul></div>
|
||||
|
||||
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
|
||||
<div class="directive-section"><h2><a name="SuexecUserGroup" id="SuexecUserGroup">SuexecUserGroup</a> <a name="suexecusergroup" id="suexecusergroup">$B%G%#%l%/%F%#%V(B</a></h2>
|
||||
<table class="directive">
|
||||
<tr><th><a href="directive-dict.html#Description">$B@bL@(B:</a></th><td>CGI $B%W%m%0%i%`$N%f!<%6%Q!<%_%C%7%g%s!"%0%k!<%W%Q!<%_%C%7%g%s(B</td></tr>
|
||||
<tr><th><a href="directive-dict.html#Syntax">$B9=J8(B:</a></th><td><code>SuexecUserGroup <em>User Group</em></code></td></tr>
|
||||
<tr><th><a href="directive-dict.html#Context">$B%3%s%F%-%9%H(B:</a></th><td>$B%5!<%P@_Dj%U%!%$%k(B, $B%P!<%A%c%k%[%9%H(B</td></tr>
|
||||
<tr><th><a href="directive-dict.html#Status">$B%9%F!<%?%9(B:</a></th><td>$B3HD%(B</td></tr>
|
||||
<tr><th><a href="directive-dict.html#Module">$B%b%8%e!<%k(B:</a></th><td>mod_suexec</td></tr>
|
||||
<tr><th><a href="directive-dict.html#Compatibility">$B8_49@-(B:</a></th><td>SuexecUserGroup $B$O(B 2.0 $B0J9_$G$N$_;HMQ2DG=!#(B</td></tr>
|
||||
</table>
|
||||
<p><code class="directive">SuexecUserGroup</code> $B%G%#%l%/%F%#%V$O(B CGI $B%W%m%0%i%`(B
|
||||
$B$,<B9T$5$l$k%f!<%6(B$B$H%0%k!<%W$r;XDj$G$-$k$h$&$K$7$^$9!#(BCGI $B0J30$N(B
|
||||
$B$,<B9T$5$l$k%f!<%6$H%0%k!<%W$r;XDj$G$-$k$h$&$K$7$^$9!#(BCGI $B0J30$N(B
|
||||
$B%j%/%(%9%H$O(B User $B%G%#%l%/%F%#%V$G;XDj$5$l$?%f!<%6$N$^$^$G=hM}$5$l$^$9!#(B
|
||||
$B$3$N%G%#%l%/%F%#%V$O(B Apache 1.3 $B$K$*$1$k(B VirtualHosts $B$NCf$G(B
|
||||
User $B%G(B$B%#%l%/%F%#%V$H(B Group $B%G%#%l%/%F%#%V$r;H$&MQK!$NBe$o$j$K$J$j$^$9!#(B</p>
|
||||
User $B%G%#%l%/%F%#%V$H(B Group $B%G%#%l%/%F%#%V$r;H$&MQK!$NBe$o$j$K$J$j$^$9!#(B</p>
|
||||
|
||||
<div class="example"><h3>$BNc(B</h3><p><code>
|
||||
|
||||
SuexecUserGroup nobody nogroup
|
||||
</code></p></div>
|
||||
|
||||
</div></div><div id="footer"><p class="apache">Maintained by the <a href="http://httpd.apache.org/docs-project/">Apache HTTP Server Documentation Project</a></p><p class="menu"><a href="../mod/">$B%b%8%e!<%k(B</a> | <a href="../mod/directives.html">$B%G%#%l%/%F%#%V(B</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">$BMQ8l(B</a> | <a href="../sitemap.html">$B%5%$%H%^%C%W(B</a></p></div></body></html>
|
||||
|
||||
</div>
|
||||
</div>
|
||||
<div id="footer">
|
||||
<p class="apache">Maintained by the <a href="http://httpd.apache.org/docs-project/">Apache HTTP Server Documentation Project</a></p>
|
||||
<p class="menu"><a href="../mod/">$B%b%8%e!<%k(B</a> | <a href="../mod/directives.html">$B%G%#%l%/%F%#%V(B</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">$BMQ8l(B</a> | <a href="../sitemap.html">$B%5%$%H%^%C%W(B</a></p></div>
|
||||
</body></html>
|
||||
@@ -34,7 +34,7 @@
|
||||
<p>If your Apache installation uses non-standard paths, you will
|
||||
need to edit the <code>apachectl</code> script to set the
|
||||
appropriate paths to the <code>httpd</code> binary. You can also
|
||||
specify any necessary <code>httpd</code> command line arugments.
|
||||
specify any necessary <code>httpd</code> command line arguments.
|
||||
See the comments in the script for details.</p>
|
||||
|
||||
<p>The <code>apachectl</code> script returns a 0 exit value on
|
||||
@@ -131,7 +131,7 @@ equivalent to <code>apachectl -t</code>.</dd>
|
||||
<dt><code>startssl</code></dt>
|
||||
|
||||
<dd>This is equivalent to <code>apachectl -k start -DSSL</code>. We
|
||||
recommend that you use that command explictly, or you adjust your
|
||||
recommend that you use that command explicitly, or you adjust your
|
||||
<code>httpd.conf</code> to remove the <code class="directive"><a href="../mod/core.html#ifdefine"><IfDefine></a></code> section so that SSL will always be
|
||||
available.</dd>
|
||||
|
||||
|
||||
@@ -196,7 +196,7 @@ directives can each use shell-style wildcard characters as in
|
||||
matches any sequence of characters, "?" matches any single character,
|
||||
and "[<em>seq</em>]" matches any character in <em>seq</em>. The "/"
|
||||
character will not be matched by any wildcard; it must be specified
|
||||
explictly.</p>
|
||||
explicitly.</p>
|
||||
|
||||
<p>If even more flexible matching is required, each
|
||||
container has a regular-expression (regex) counterpart <code class="directive"><a href="./mod/core.html#directorymatch"><DirectoryMatch></a></code>, <code class="directive"><a href="./mod/core.html#filesmatch"><FilesMatch></a></code>, and <code class="directive"><a href="./mod/core.html#locationmatch"><LocationMatch></a></code> that allow
|
||||
|
||||
@@ -4,7 +4,19 @@
|
||||
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
|
||||
This file is generated from xml source: DO NOT EDIT
|
||||
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
|
||||
--><title>Apache $B$N(B SSL/TLS $B0E9f2=(B - Apache HTTP $B%5!<%P(B</title><link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" /><link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" /><link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link href="../images/favicon.ico" rel="shortcut icon" /></head><body id="manual-page"><div id="page-header"><p class="menu"><a href="../mod/">$B%b%8%e!<%k(B</a> | <a href="../mod/directives.html">$B%G%#%l%/%F%#%V(B</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">$BMQ8l(B</a> | <a href="../sitemap.html">$B%5%$%H%^%C%W(B</a></p><p class="apache">Apache HTTP $B%5!<%P(B $B%P!<%8%g%s(B 2.0</p><img alt="" src="../images/feather.gif" /></div><div class="up"><a href="./"><img title="<-" alt="<-" src="../images/left.gif" /></a></div><div id="path"><a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP $B%5!<%P(B</a> > <a href="http://httpd.apache.org/docs-project/">$B%I%-%e%a%s%F!<%7%g%s(B</a> > <a href="../">$B%P!<%8%g%s(B 2.0</a></div><div id="page-content"><div id="preamble"><h1>Apache $B$N(B SSL/TLS $B0E9f2=(B</h1>
|
||||
-->
|
||||
<title>Apache $B$N(B SSL/TLS $B0E9f2=(B - Apache HTTP $B%5!<%P(B</title>
|
||||
<link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
|
||||
<link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
|
||||
<link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" />
|
||||
<link href="../images/favicon.ico" rel="shortcut icon" /></head>
|
||||
<body id="manual-page"><div id="page-header">
|
||||
<p class="menu"><a href="../mod/">$B%b%8%e!<%k(B</a> | <a href="../mod/directives.html">$B%G%#%l%/%F%#%V(B</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">$BMQ8l(B</a> | <a href="../sitemap.html">$B%5%$%H%^%C%W(B</a></p>
|
||||
<p class="apache">Apache HTTP $B%5!<%P(B $B%P!<%8%g%s(B 2.1</p>
|
||||
<img alt="" src="../images/feather.gif" /></div>
|
||||
<div class="up"><a href="./"><img title="<-" alt="<-" src="../images/left.gif" /></a></div>
|
||||
<div id="path">
|
||||
<a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP $B%5!<%P(B</a> > <a href="http://httpd.apache.org/docs-project/">$B%I%-%e%a%s%F!<%7%g%s(B</a> > <a href="../">$B%P!<%8%g%s(B 2.1</a></div><div id="page-content"><div id="preamble"><h1>Apache $B$N(B SSL/TLS $B0E9f2=(B</h1>
|
||||
<p>Apache HTTP $B%5!<%P%b%8%e!<%k(B <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> $B$,(B
|
||||
<a href="http://www.openssl.org/">OpenSSL</a>
|
||||
$B%i%$%V%i%j$X$N%$%s%?!<%U%'!<%9$rDs6!$7$F$$$^$9$,!"$3$l$O(B
|
||||
@@ -12,7 +24,13 @@ Secure Sockts Layer $B$H(B Transport Layer Security
|
||||
$B%W%m%H%3%k$rMQ$$$?6/NO$J0E9f2=$rDs6!$7$^$9!#(B
|
||||
$B$3$N%b%8%e!<%k$d$3$NJ8=q$O(B Ralf S. Engelschall $B$N(B mod_ssl
|
||||
$B%W%m%8%'%/%H$K4p$E$$$F$$$^$9!#(B</p>
|
||||
</div><div id="quickview"><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#documentation">Documentation</a></li><li><img alt="" src="../images/down.gif" /> <a href="#mod-ssl">mod_ssl</a></li></ul></div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div><div class="section"><h2><a name="documentation" id="documentation">Documentation</a></h2>
|
||||
</div>
|
||||
<div id="quickview"><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#documentation">Documentation</a></li>
|
||||
<li><img alt="" src="../images/down.gif" /> <a href="#mod-ssl">mod_ssl</a></li>
|
||||
</ul></div>
|
||||
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
|
||||
<div class="section">
|
||||
<h2><a name="documentation" id="documentation">Documentation</a></h2>
|
||||
<ul>
|
||||
<li><a href="ssl_intro.html">$B$O$8$a$K(B</a></li>
|
||||
<li><a href="ssl_compat.html">$B8_49@-(B</a></li>
|
||||
@@ -20,8 +38,14 @@ Secure Sockts Layer $B$H(B Transport Layer Security
|
||||
<li><a href="ssl_faq.html">$B$h$/$"$k<ALd(B</a></li>
|
||||
<li><a href="../glossary.html">$BMQ8l(B</a></li>
|
||||
</ul>
|
||||
</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div><div class="section"><h2><a name="mod-ssl" id="mod-ssl">mod_ssl</a></h2>
|
||||
</div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
|
||||
<div class="section">
|
||||
<h2><a name="mod-ssl" id="mod-ssl">mod_ssl</a></h2>
|
||||
<p>$B$3$N%b%8%e!<%k$GDs6!$5$l$k%G%#%l%/%F%#%V$d4D6-JQ?t$K4X$9$k(B
|
||||
$B>\$7$$J8=q$O!"(B<a href="../mod/mod_ssl.html">mod_ssl
|
||||
$B%j%U%!%l%s%9(B</a>$B$r$4Mw2<$5$$!#(B</p>
|
||||
</div></div><div id="footer"><p class="apache">Maintained by the <a href="http://httpd.apache.org/docs-project/">Apache HTTP Server Documentation Project</a></p><p class="menu"><a href="../mod/">$B%b%8%e!<%k(B</a> | <a href="../mod/directives.html">$B%G%#%l%/%F%#%V(B</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">$BMQ8l(B</a> | <a href="../sitemap.html">$B%5%$%H%^%C%W(B</a></p></div></body></html>
|
||||
</div></div>
|
||||
<div id="footer">
|
||||
<p class="apache">Maintained by the <a href="http://httpd.apache.org/docs-project/">Apache HTTP Server Documentation Project</a></p>
|
||||
<p class="menu"><a href="../mod/">$B%b%8%e!<%k(B</a> | <a href="../mod/directives.html">$B%G%#%l%/%F%#%V(B</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">$BMQ8l(B</a> | <a href="../sitemap.html">$B%5%$%H%^%C%W(B</a></p></div>
|
||||
</body></html>
|
||||
@@ -28,7 +28,7 @@ Here we talk about backward compatibility to other SSL solutions. As you
|
||||
perhaps know, mod_ssl is not the only existing SSL solution for Apache.
|
||||
Actually there are four additional major products available on the market: Ben
|
||||
Laurie's freely available <a href="http://www.apache-ssl.org/">Apache-SSL</a>
|
||||
(from where mod_ssl were originally derived in 1998), RedHat's commercial <a href="http://www.redhat.com/products/product-details.phtml?id=rhsa">Secure Web
|
||||
(from where mod_ssl were originally derived in 1998), Red Hat's commercial <a href="http://www.redhat.com/products/product-details.phtml?id=rhsa">Secure Web
|
||||
Server</a> (which is based on mod_ssl), Covalent's commercial <a href="http://raven.covalent.net/">Raven SSL Module</a> (also based on mod_ssl)
|
||||
and finally C2Net's commercial product <a href="http://www.c2.net/products/stronghold/">Stronghold</a> (based on a
|
||||
different evolution branch named Sioux up to Stronghold 2.x and based on
|
||||
@@ -53,7 +53,7 @@ solutions we do an on-the-fly mapping: directives which have a direct
|
||||
counterpart in mod_ssl are mapped silently while other directives lead to a
|
||||
warning message in the logfiles. The currently implemented directive mapping
|
||||
is listed in <a href="#table1">Table 1</a>. Currently full backward
|
||||
compatibilty is provided only for Apache-SSL 1.x and mod_ssl 2.0.x.
|
||||
compatibility is provided only for Apache-SSL 1.x and mod_ssl 2.0.x.
|
||||
Compatibility to Sioux 1.x and Stronghold 2.x is only partial because of
|
||||
special functionality in these interfaces which mod_ssl (still) doesn't
|
||||
provide.</p>
|
||||
|
||||
@@ -25,7 +25,7 @@ he poses the right questions.</p>
|
||||
</blockquote>
|
||||
<p>This chapter is a collection of frequently asked questions (FAQ) and
|
||||
corresponding answers following the popular USENET tradition. Most of these
|
||||
questions occured on the Newsgroup <code><a href="news:comp.infosystems.www.servers.unix">comp.infosystems.www.servers.unix</a></code> or the mod_ssl Support
|
||||
questions occurred on the Newsgroup <code><a href="news:comp.infosystems.www.servers.unix">comp.infosystems.www.servers.unix</a></code> or the mod_ssl Support
|
||||
Mailing List <code><a href="mailto:modssl-users@modssl.org">modssl-users@modssl.org</a></code>. They are collected at this place
|
||||
to avoid answering the same questions over and over.</p>
|
||||
|
||||
@@ -55,7 +55,7 @@ author.</p>
|
||||
Laurie's development cycle it then was re-assembled from scratch for
|
||||
Apache 1.3.0 by merging the old mod_ssl 1.x with the newer Apache-SSL
|
||||
1.18. From this point on mod_ssl lived its own life as mod_ssl v2. The
|
||||
first publically released version was mod_ssl 2.0.0 from August 10th,
|
||||
first publicly released version was mod_ssl 2.0.0 from August 10th,
|
||||
1998. As of this writing (August 1999) the current mod_ssl version
|
||||
is 2.4.0.</p>
|
||||
|
||||
@@ -87,7 +87,7 @@ author.</p>
|
||||
|
||||
<p>Additionally according to a <a href="http://www.apache.org/docs/misc/FAQ.html#year2000">Year 2000
|
||||
statement</a> from the Apache Group, the Apache webserver is Year 2000
|
||||
compliant, too. But whether OpenSSL or the underlaying Operating System
|
||||
compliant, too. But whether OpenSSL or the underlying Operating System
|
||||
(either a Unix or Win32 platform) is Year 2000 compliant is a different
|
||||
question which cannot be answered here.</p>
|
||||
|
||||
@@ -100,9 +100,9 @@ author.</p>
|
||||
replaced the previous <dfn>CoCom</dfn> regime. 33 countries are signatories:
|
||||
Argentina, Australia, Austria, Belgium, Bulgaria, Canada, Czech Republic,
|
||||
Denmark, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Japan,
|
||||
Luxembourg, Netherlands, New Zealand, Norway, Poland, Portugal, Republic
|
||||
Luxembourg, the Netherlands, New Zealand, Norway, Poland, Portugal, Republic
|
||||
of Korea, Romania, Russian Federation, Slovak Republic, Spain, Sweden,
|
||||
Switzerland, Turkey, Ukraine, United Kingdom and United States. For more
|
||||
Switzerland, Turkey, Ukraine, the United Kingdom and the United States. For more
|
||||
details look at <a href="http://www.wassenaar.org/">http://www.wassenaar.org/</a>.</p>
|
||||
|
||||
|
||||
@@ -683,7 +683,7 @@ Hosting to identify different SSL virtual hosts?</a></li>
|
||||
<h3><a name="load" id="load">Why has my webserver a higher load now that I run SSL there?</a></h3>
|
||||
<p>Because SSL uses strong cryptographic encryption and this needs a lot of
|
||||
number crunching. And because when you request a webpage via HTTPS even
|
||||
the images are transfered encrypted. So, when you have a lot of HTTPS
|
||||
the images are transferred encrypted. So, when you have a lot of HTTPS
|
||||
traffic the load increases.</p>
|
||||
|
||||
|
||||
@@ -691,7 +691,7 @@ Hosting to identify different SSL virtual hosts?</a></li>
|
||||
the connection, although sometimes it works faster?</a></h3>
|
||||
<p>Usually this is caused by using a <code>/dev/random</code> device for
|
||||
<code>SSLRandomSeed</code> which is blocking in read(2) calls if not
|
||||
enough entropy is available. Read more about this problem in the refernce
|
||||
enough entropy is available. Read more about this problem in the reference
|
||||
chapter under <code>SSLRandomSeed</code>.</p>
|
||||
|
||||
|
||||
@@ -731,9 +731,9 @@ shared cipher'' errors?</a></h3>
|
||||
I try to connect to my freshly installed server?</a></h3>
|
||||
<p>Either you have messed up your <code>SSLCipherSuite</code>
|
||||
directive (compare it with the pre-configured example in
|
||||
<code>httpd.conf-dist</code>) or you have choosen the DSA/DH
|
||||
<code>httpd.conf-dist</code>) or you have chosen the DSA/DH
|
||||
algorithms instead of RSA when you generated your private key
|
||||
and ignored or overlooked the warnings. If you have choosen
|
||||
and ignored or overlooked the warnings. If you have chosen
|
||||
DSA/DH, then your server no longer speaks RSA-based SSL ciphers
|
||||
(at least not until you also configure an additional RSA-based
|
||||
certificate/key pair). But current browsers like NS or IE only speak
|
||||
|
||||
@@ -83,7 +83,7 @@ only, but allows export browsers to upgrade to stronger encryption?</a></h3>
|
||||
strong encryption or have to upgrade to strong encryption, but are
|
||||
not allowed to keep the export ciphers. The following does the trick:</p>
|
||||
<div class="example"><h3>httpd.conf</h3><p><code>
|
||||
# allow all ciphers for the inital handshake,<br />
|
||||
# allow all ciphers for the initial handshake,<br />
|
||||
# so export browsers can upgrade via SGC facility<br />
|
||||
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL<br />
|
||||
<br />
|
||||
@@ -132,7 +132,7 @@ all my clients?</a></h3>
|
||||
situation), as it's the case for instance in an Intranet, you can
|
||||
use plain certificate authentication. All you have to do is to
|
||||
create client certificates signed by your own CA certificate
|
||||
<code>ca.crt</code> and then verifiy the clients against this
|
||||
<code>ca.crt</code> and then verify the clients against this
|
||||
certificate.</p>
|
||||
<div class="example"><h3>httpd.conf</h3><p><code>
|
||||
# require a client certificate which has to be directly<br />
|
||||
@@ -165,7 +165,7 @@ parts of the server?</a></h3>
|
||||
on certificates but still allow arbitrary clients to access the remaining
|
||||
parts of the server?</a></h3>
|
||||
|
||||
<p>The key is to check for various ingredients of the client certficate.
|
||||
<p>The key is to check for various ingredients of the client certificate.
|
||||
Usually this means to check the whole or part of the Distinguished
|
||||
Name (DN) of the Subject. For this two methods exists: The <code class="module"><a href="../mod/mod_auth_basic.html">mod_auth_basic</a></code> based variant and the <code class="directive"><a href="../mod/mod_ssl.html#sslrequire">SSLRequire</a></code> variant. The first method is
|
||||
good when the clients are of totally different type, i.e. when their
|
||||
|
||||
@@ -40,7 +40,7 @@ from the article <a href="http://home.earthlink.net/~fjhirsch/Papers/wwwj/articl
|
||||
SSL and Certificates using SSLeay</a> from <a href="http://home.earthlink.net/~fjhirsch/">Frederick J. Hirsch</a>, of The
|
||||
Open Group Research Institute, which was published in <a href="http://www.ora.com/catalog/wjsum97/">Web Security: A Matter of
|
||||
Trust</a>, World Wide Web Journal, Volume 2, Issue 3, Summer 1997.
|
||||
Please send any postive feedback to <a href="mailto:hirsch@fjhirsch.com">Frederick Hirsch</a> (the original
|
||||
Please send any positive feedback to <a href="mailto:hirsch@fjhirsch.com">Frederick Hirsch</a> (the original
|
||||
article author) and all negative feedback to <a href="mailto:rse@engelschall.com">Ralf S. Engelschall</a> (the
|
||||
<code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> author).</p>
|
||||
</div>
|
||||
@@ -122,7 +122,7 @@ messages which create the same digest -- thus eliminating the possibility of
|
||||
substituting one message for another while maintaining the same digest.</p>
|
||||
<p>Another challenge that Alice faces is finding a way to send the digest to the
|
||||
bank securely; when this is achieved, the integrity of the associated message
|
||||
is assured. One way to to this is to include the digest in a digital
|
||||
is assured. One way to do this is to include the digest in a digital
|
||||
signature.</p>
|
||||
|
||||
|
||||
@@ -185,7 +185,7 @@ certificates are used for authentication.</p>
|
||||
<tr><th>Administrative Information</th>
|
||||
<td>Version, Serial Number</td></tr>
|
||||
<tr><th>Extended Information</th>
|
||||
<td>Basic Contraints, Netscape Flags, etc.</td></tr>
|
||||
<td>Basic Constraints, Netscape Flags, etc.</td></tr>
|
||||
</table>
|
||||
|
||||
|
||||
|
||||
@@ -53,7 +53,7 @@
|
||||
Apache Group and this document.</p>
|
||||
|
||||
<p>First, it is assumed that you are using a UNIX
|
||||
derivate operating system that is capable of
|
||||
derivative operating system that is capable of
|
||||
<strong>setuid</strong> and <strong>setgid</strong> operations.
|
||||
All command examples are given in this regard. Other platforms,
|
||||
if they are capable of supporting suEXEC, may differ in their
|
||||
@@ -327,7 +327,7 @@
|
||||
</li>
|
||||
</ol>
|
||||
|
||||
<p>This is the standard operation of the the
|
||||
<p>This is the standard operation of the
|
||||
suEXEC wrapper's security model. It is somewhat stringent and
|
||||
can impose new limitations and guidelines for CGI/SSI design,
|
||||
but it was developed carefully step-by-step with security in
|
||||
|
||||
@@ -199,7 +199,7 @@ ProxyPassReverse /foo/ http://internal.example.com/bar/
|
||||
the server to fetch the appropriate documents, while the
|
||||
<code class="directive"><a href="./mod/mod_proxy.html#proxypassreverse">ProxyPassReverse</a></code>
|
||||
directive rewrites redirects originating at
|
||||
<code>internal.examle.com</code> so that they target the appropriate
|
||||
<code>internal.example.com</code> so that they target the appropriate
|
||||
directory on the local server. It is important to note, however, that
|
||||
links inside the documents will not be rewritten. So any absolute
|
||||
links on <code>internal.example.com</code> will result in the client
|
||||
|
||||
@@ -97,7 +97,7 @@ more about customizing your log files.)</p>
|
||||
<p>When you wish to split your log file into its component parts (one
|
||||
file per virtual host) you can use the program <code><a href="../programs/other.html">split-logfile</a></code> to accomplish
|
||||
this. You'll find this program in the <code>support</code> directory
|
||||
of the Apache disribution.</p>
|
||||
of the Apache distribution.</p>
|
||||
|
||||
<p>Run this program with the command:</p>
|
||||
|
||||
|
||||
@@ -157,7 +157,7 @@
|
||||
is allowed, check the <a href="../mod/directive-dict.html#Context">Context</a> of the
|
||||
directive. Configuration directives set in the <em>main server
|
||||
context</em> (outside any <code><VirtualHost></code> container)
|
||||
will be used only if they are not overriden by the virtual host
|
||||
will be used only if they are not overridden by the virtual host
|
||||
settings.</p>
|
||||
|
||||
<p>Now when a request arrives, the server will first check if it is
|
||||
|
||||
Reference in New Issue
Block a user