Description: | Enable OCSP validation of the client certificate chain |
-Syntax: | SSLOCSPEnable on|off |
+Syntax: | SSLOCSPEnable on|leaf|off |
Default: | SSLOCSPEnable off |
Context: | server config, virtual host |
Status: | Extension |
@@ -1102,7 +1102,8 @@ the certificate being verified.
This option enables OCSP validation of the client certificate
chain. If this option is enabled, certificates in the client's
certificate chain will be validated against an OCSP responder after
-normal verification (including CRL checks) have taken place.
+normal verification (including CRL checks) have taken place. In
+mode 'leaf', only the client certificate itself will be validated.
The OCSP responder used is either extracted from the certificate
itself, or derived by configuration; see the
diff --git a/docs/manual/mod/quickreference.html.de b/docs/manual/mod/quickreference.html.de
index 842b0d62b1..c667757bf7 100644
--- a/docs/manual/mod/quickreference.html.de
+++ b/docs/manual/mod/quickreference.html.de
@@ -155,7 +155,7 @@ formatted email address
AsyncRequestWorkerFactor factor | | s | M |
Limit concurrent connections per process |
AuthBasicAuthoritative On|Off | On | dh | B |
Sets whether authorization and authentication are passed to
lower level modules |
-AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
+ |
AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
username and password |
AuthBasicProvider provider-name
[provider-name] ... | file | dh | B |
Sets the authentication provider(s) for this location |
@@ -731,21 +731,21 @@ simultaneously
MaxSpareThreads Anzahl | | s | M |
Maximale Anzahl unbeschftigter Threads |
MaxThreads number | 2048 | s | M |
Set the maximum number of worker threads |
MDBaseServer on|off | off | s | E |
Control if base server may be managed or only virtual hosts. |
-MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
-MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
-MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
-MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
+MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
+MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
+MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
+MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
MDDriveMode always|auto|manual | auto | s | E |
Control when it is allowed to obtain/renew certificates. |
-MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
-MDMember hostname | | s | E |
Additional hostname for the managed domain. |
+MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
+MDMember hostname | | s | E |
Additional hostname for the managed domain. |
MDMembers auto|manual | auto | s | E |
Control if the alias domain names are automatically added. |
MDMustStaple on|off | off | s | E |
Control if new certificates carry the OCSP Must Staple flag. |
-MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
+MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
MDomain dns-name [ other-dns-name... ] [auto|manual] | | s | E |
Define list of domain names that belong to one group. |
<MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet> | | s | E |
Container for directives applied to the same managed domains. |
-MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
-MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
-MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
+MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
+MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
+MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
MDRequireHttps off|temporary|permanent | off | s | E |
Redirects http: traffic to https: for Managed Domains. |
MDStoreDir path | md | s | E |
Path on the local file system to store the Managed Domains data. |
MemcacheConnTTL num[units] | 15s | sv | E |
Keepalive time for idle connections |
@@ -1096,7 +1096,7 @@ handshake
SSLHonorCipherOrder on|off | off | sv | E |
Option to prefer the server's cipher preference order |
SSLInsecureRenegotiation on|off | off | sv | E |
Option to enable support for insecure renegotiation |
SSLOCSDefaultResponder uri | | sv | E |
Set the default responder URI for OCSP validation |
-SSLOCSPEnable on|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
+SSLOCSPEnable on|leaf|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
SSLOCSPNoverify On/Off | Off | sv | E |
skip the OCSP responder certificates verification |
SSLOCSPOverrideResponder on|off | off | sv | E |
Force use of the default responder URI for OCSP validation |
SSLOCSPProxyURL url | | sv | E |
Proxy URL to use for OCSP requests |
diff --git a/docs/manual/mod/quickreference.html.en b/docs/manual/mod/quickreference.html.en
index dc9bfb52e0..6d438bcee8 100644
--- a/docs/manual/mod/quickreference.html.en
+++ b/docs/manual/mod/quickreference.html.en
@@ -151,7 +151,7 @@ formatted email address
AsyncRequestWorkerFactor factor | | s | M |
Limit concurrent connections per process |
AuthBasicAuthoritative On|Off | On | dh | B |
Sets whether authorization and authentication are passed to
lower level modules |
-AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
+ |
AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
username and password |
AuthBasicProvider provider-name
[provider-name] ... | file | dh | B |
Sets the authentication provider(s) for this location |
@@ -724,21 +724,21 @@ simultaneously
MaxSpareThreads number | | s | M |
Maximum number of idle threads |
MaxThreads number | 2048 | s | M |
Set the maximum number of worker threads |
MDBaseServer on|off | off | s | E |
Control if base server may be managed or only virtual hosts. |
-MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
-MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
-MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
-MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
+MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
+MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
+MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
+MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
MDDriveMode always|auto|manual | auto | s | E |
Control when it is allowed to obtain/renew certificates. |
-MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
-MDMember hostname | | s | E |
Additional hostname for the managed domain. |
+MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
+MDMember hostname | | s | E |
Additional hostname for the managed domain. |
MDMembers auto|manual | auto | s | E |
Control if the alias domain names are automatically added. |
MDMustStaple on|off | off | s | E |
Control if new certificates carry the OCSP Must Staple flag. |
-MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
+MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
MDomain dns-name [ other-dns-name... ] [auto|manual] | | s | E |
Define list of domain names that belong to one group. |
<MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet> | | s | E |
Container for directives applied to the same managed domains. |
-MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
-MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
-MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
+MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
+MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
+MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
MDRequireHttps off|temporary|permanent | off | s | E |
Redirects http: traffic to https: for Managed Domains. |
MDStoreDir path | md | s | E |
Path on the local file system to store the Managed Domains data. |
MemcacheConnTTL num[units] | 15s | sv | E |
Keepalive time for idle connections |
@@ -1084,7 +1084,7 @@ handshake
SSLHonorCipherOrder on|off | off | sv | E |
Option to prefer the server's cipher preference order |
SSLInsecureRenegotiation on|off | off | sv | E |
Option to enable support for insecure renegotiation |
SSLOCSDefaultResponder uri | | sv | E |
Set the default responder URI for OCSP validation |
-SSLOCSPEnable on|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
+SSLOCSPEnable on|leaf|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
SSLOCSPNoverify On/Off | Off | sv | E |
skip the OCSP responder certificates verification |
SSLOCSPOverrideResponder on|off | off | sv | E |
Force use of the default responder URI for OCSP validation |
SSLOCSPProxyURL url | | sv | E |
Proxy URL to use for OCSP requests |
diff --git a/docs/manual/mod/quickreference.html.es b/docs/manual/mod/quickreference.html.es
index 6687e02ed9..dccccabeb8 100644
--- a/docs/manual/mod/quickreference.html.es
+++ b/docs/manual/mod/quickreference.html.es
@@ -722,21 +722,21 @@ simultaneously
MaxSpareThreads number | | s | M |
Maximum number of idle threads |
MaxThreads number | 2048 | s | M |
Set the maximum number of worker threads |
MDBaseServer on|off | off | s | E |
Control if base server may be managed or only virtual hosts. |
-MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
-MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
-MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
-MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
+MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
+MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
+MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
+MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
MDDriveMode always|auto|manual | auto | s | E |
Control when it is allowed to obtain/renew certificates. |
-MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
-MDMember hostname | | s | E |
Additional hostname for the managed domain. |
+MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
+MDMember hostname | | s | E |
Additional hostname for the managed domain. |
MDMembers auto|manual | auto | s | E |
Control if the alias domain names are automatically added. |
MDMustStaple on|off | off | s | E |
Control if new certificates carry the OCSP Must Staple flag. |
-MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
+MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
MDomain dns-name [ other-dns-name... ] [auto|manual] | | s | E |
Define list of domain names that belong to one group. |
<MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet> | | s | E |
Container for directives applied to the same managed domains. |
-MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
-MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
-MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
+MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
+MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
+MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
MDRequireHttps off|temporary|permanent | off | s | E |
Redirects http: traffic to https: for Managed Domains. |
MDStoreDir path | md | s | E |
Path on the local file system to store the Managed Domains data. |
MemcacheConnTTL num[units] | 15s | sv | E |
Keepalive time for idle connections |
diff --git a/docs/manual/mod/quickreference.html.fr b/docs/manual/mod/quickreference.html.fr
index 9a7258041b..ecce90e087 100644
--- a/docs/manual/mod/quickreference.html.fr
+++ b/docs/manual/mod/quickreference.html.fr
@@ -914,21 +914,21 @@ inactifs
MaxSpareThreads nombre | | s | M |
Nombre maximum de threads inactifs |
MaxThreads nombre | 2048 | s | M |
Dfinit le nombre maximum de threads esclaves |
MDBaseServer on|off | off | s | E |
Control if base server may be managed or only virtual hosts. |
-MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
-MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
-MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
-MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
+MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
+MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
+MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
+MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
MDDriveMode always|auto|manual | auto | s | E |
Control when it is allowed to obtain/renew certificates. |
-MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
-MDMember hostname | | s | E |
Additional hostname for the managed domain. |
+MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
+MDMember hostname | | s | E |
Additional hostname for the managed domain. |
MDMembers auto|manual | auto | s | E |
Control if the alias domain names are automatically added. |
MDMustStaple on|off | off | s | E |
Control if new certificates carry the OCSP Must Staple flag. |
-MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
+MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
MDomain dns-name [ other-dns-name... ] [auto|manual] | | s | E |
Define list of domain names that belong to one group. |
<MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet> | | s | E |
Container for directives applied to the same managed domains. |
-MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
-MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
-MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
+MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
+MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
+MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
MDRequireHttps off|temporary|permanent | off | s | E |
Redirects http: traffic to https: for Managed Domains. |
MDStoreDir path | md | s | E |
Path on the local file system to store the Managed Domains data. |
MemcacheConnTTL num[units] | 15s | sv | E |
Dure de conservation des connexions inactives |
diff --git a/docs/manual/mod/quickreference.html.ja.utf8 b/docs/manual/mod/quickreference.html.ja.utf8
index 5855db3da5..d0f1d4e2e4 100644
--- a/docs/manual/mod/quickreference.html.ja.utf8
+++ b/docs/manual/mod/quickreference.html.ja.utf8
@@ -146,7 +146,7 @@ MIME タイプによって選択
AsyncRequestWorkerFactor factor | | s | M |
Limit concurrent connections per process |
AuthBasicAuthoritative On|Off | On | dh | B |
認証と承認を、より低いレベルのモジュールに移行させるかを
設定します。 |
-AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
+ |
AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
username and password |
AuthBasicProvider provider-name
[provider-name] ... | file | dh | B |
この位置に対する認証プロバイダを設定します。 |
@@ -690,21 +690,21 @@ simultaneously
MaxSpareThreads number | | s | M |
アイドルスレッドの最大数 |
MaxThreads number | 2048 | s | M |
Set the maximum number of worker threads |
MDBaseServer on|off | off | s | E |
Control if base server may be managed or only virtual hosts. |
-MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
-MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
-MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
-MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
+MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
+MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
+MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
+MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
MDDriveMode always|auto|manual | auto | s | E |
Control when it is allowed to obtain/renew certificates. |
-MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
-MDMember hostname | | s | E |
Additional hostname for the managed domain. |
+MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
+MDMember hostname | | s | E |
Additional hostname for the managed domain. |
MDMembers auto|manual | auto | s | E |
Control if the alias domain names are automatically added. |
MDMustStaple on|off | off | s | E |
Control if new certificates carry the OCSP Must Staple flag. |
-MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
+MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
MDomain dns-name [ other-dns-name... ] [auto|manual] | | s | E |
Define list of domain names that belong to one group. |
<MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet> | | s | E |
Container for directives applied to the same managed domains. |
-MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
-MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
-MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
+MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
+MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
+MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
MDRequireHttps off|temporary|permanent | off | s | E |
Redirects http: traffic to https: for Managed Domains. |
MDStoreDir path | md | s | E |
Path on the local file system to store the Managed Domains data. |
MemcacheConnTTL num[units] | 15s | sv | E |
Keepalive time for idle connections |
@@ -1016,7 +1016,7 @@ handshake
SSLHonorCipherOrder on|off | off | sv | E |
Option to prefer the server's cipher preference order |
SSLInsecureRenegotiation on|off | off | sv | E |
Option to enable support for insecure renegotiation |
SSLOCSDefaultResponder uri | | sv | E |
Set the default responder URI for OCSP validation |
-SSLOCSPEnable on|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
+SSLOCSPEnable on|leaf|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
SSLOCSPNoverify On/Off | Off | sv | E |
skip the OCSP responder certificates verification |
SSLOCSPOverrideResponder on|off | off | sv | E |
Force use of the default responder URI for OCSP validation |
SSLOCSPProxyURL url | | sv | E |
Proxy URL to use for OCSP requests |
diff --git a/docs/manual/mod/quickreference.html.ko.euc-kr b/docs/manual/mod/quickreference.html.ko.euc-kr
index 2dc09e1f4d..e3fe5d7eb4 100644
--- a/docs/manual/mod/quickreference.html.ko.euc-kr
+++ b/docs/manual/mod/quickreference.html.ko.euc-kr
@@ -145,7 +145,7 @@ be passed through
AsyncFilter request|connection|network | request | sv | C |
Set the minimum filter type eligible for asynchronous handling |
AsyncRequestWorkerFactor factor | | s | M |
Limit concurrent connections per process |
AuthBasicAuthoritative On|Off | On | dh | B |
Ѻο Ѱ Ѵ |
-AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
+ |
AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
username and password |
AuthBasicProvider On|Off|provider-name
[provider-name] ... | On | dh | B |
ġ ڸ Ѵ |
@@ -692,21 +692,21 @@ simultaneously
MaxSpareThreads number | | s | M |
Maximum number of idle threads |
MaxThreads number | 2048 | s | M |
Set the maximum number of worker threads |
MDBaseServer on|off | off | s | E |
Control if base server may be managed or only virtual hosts. |
-MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
-MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
-MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
-MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
+MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
+MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
+MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
+MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
MDDriveMode always|auto|manual | auto | s | E |
Control when it is allowed to obtain/renew certificates. |
-MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
-MDMember hostname | | s | E |
Additional hostname for the managed domain. |
+MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
+MDMember hostname | | s | E |
Additional hostname for the managed domain. |
MDMembers auto|manual | auto | s | E |
Control if the alias domain names are automatically added. |
MDMustStaple on|off | off | s | E |
Control if new certificates carry the OCSP Must Staple flag. |
-MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
+MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
MDomain dns-name [ other-dns-name... ] [auto|manual] | | s | E |
Define list of domain names that belong to one group. |
<MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet> | | s | E |
Container for directives applied to the same managed domains. |
-MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
-MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
-MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
+MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
+MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
+MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
MDRequireHttps off|temporary|permanent | off | s | E |
Redirects http: traffic to https: for Managed Domains. |
MDStoreDir path | md | s | E |
Path on the local file system to store the Managed Domains data. |
MemcacheConnTTL num[units] | 15s | sv | E |
Keepalive time for idle connections |
@@ -1042,7 +1042,7 @@ handshake
SSLHonorCipherOrder on|off | off | sv | E |
Option to prefer the server's cipher preference order |
SSLInsecureRenegotiation on|off | off | sv | E |
Option to enable support for insecure renegotiation |
SSLOCSDefaultResponder uri | | sv | E |
Set the default responder URI for OCSP validation |
-SSLOCSPEnable on|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
+SSLOCSPEnable on|leaf|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
SSLOCSPNoverify On/Off | Off | sv | E |
skip the OCSP responder certificates verification |
SSLOCSPOverrideResponder on|off | off | sv | E |
Force use of the default responder URI for OCSP validation |
SSLOCSPProxyURL url | | sv | E |
Proxy URL to use for OCSP requests |
diff --git a/docs/manual/mod/quickreference.html.tr.utf8 b/docs/manual/mod/quickreference.html.tr.utf8
index 48d4800bdf..0461848242 100644
--- a/docs/manual/mod/quickreference.html.tr.utf8
+++ b/docs/manual/mod/quickreference.html.tr.utf8
@@ -154,7 +154,7 @@ formatted email address
AsyncRequestWorkerFactor factor | | s | M |
Limit concurrent connections per process |
AuthBasicAuthoritative On|Off | On | dh | T |
Sets whether authorization and authentication are passed to
lower level modules |
-AuthBasicFake off|username [password] | | dh | T |
Fake basic authentication using the given expressions for
+ |
AuthBasicFake off|username [password] | | dh | T |
Fake basic authentication using the given expressions for
username and password |
AuthBasicProvider provider-name
[provider-name] ... | file | dh | T |
Sets the authentication provider(s) for this location |
@@ -725,21 +725,21 @@ processing
MaxSpareThreads number | | s | M |
Boştaki azami evre sayısını belirler |
MaxThreads number | 2048 | s | M |
Set the maximum number of worker threads |
MDBaseServer on|off | off | s | E |
Control if base server may be managed or only virtual hosts. |
-MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
-MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
-MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
-MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
+MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
+MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
+MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
+MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
MDDriveMode always|auto|manual | auto | s | E |
Control when it is allowed to obtain/renew certificates. |
-MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
-MDMember hostname | | s | E |
Additional hostname for the managed domain. |
+MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
+MDMember hostname | | s | E |
Additional hostname for the managed domain. |
MDMembers auto|manual | auto | s | E |
Control if the alias domain names are automatically added. |
MDMustStaple on|off | off | s | E |
Control if new certificates carry the OCSP Must Staple flag. |
-MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
+MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
MDomain dns-name [ other-dns-name... ] [auto|manual] | | s | E |
Define list of domain names that belong to one group. |
<MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet> | | s | E |
Container for directives applied to the same managed domains. |
-MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
-MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
-MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
+MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
+MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
+MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
MDRequireHttps off|temporary|permanent | off | s | E |
Redirects http: traffic to https: for Managed Domains. |
MDStoreDir path | md | s | E |
Path on the local file system to store the Managed Domains data. |
MemcacheConnTTL num[units] | 15s | sk | E |
Keepalive time for idle connections |
@@ -1081,7 +1081,7 @@ handshake
SSLHonorCipherOrder on|off | off | sk | E |
Option to prefer the server's cipher preference order |
SSLInsecureRenegotiation on|off | off | sk | E |
Option to enable support for insecure renegotiation |
SSLOCSDefaultResponder uri | | sk | E |
Set the default responder URI for OCSP validation |
-SSLOCSPEnable on|off | off | sk | E |
Enable OCSP validation of the client certificate chain |
+SSLOCSPEnable on|leaf|off | off | sk | E |
Enable OCSP validation of the client certificate chain |
SSLOCSPNoverify On/Off | Off | sk | E |
skip the OCSP responder certificates verification |
SSLOCSPOverrideResponder on|off | off | sk | E |
Force use of the default responder URI for OCSP validation |
SSLOCSPProxyURL url | | sk | E |
Proxy URL to use for OCSP requests |
diff --git a/docs/manual/mod/quickreference.html.zh-cn.utf8 b/docs/manual/mod/quickreference.html.zh-cn.utf8
index f363f2918c..2f2248e79b 100644
--- a/docs/manual/mod/quickreference.html.zh-cn.utf8
+++ b/docs/manual/mod/quickreference.html.zh-cn.utf8
@@ -146,7 +146,7 @@ formatted email address
AsyncRequestWorkerFactor factor | | s | M |
Limit concurrent connections per process |
AuthBasicAuthoritative On|Off | On | dh | B |
Sets whether authorization and authentication are passed to
lower level modules |
-AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
+ |
AuthBasicFake off|username [password] | | dh | B |
Fake basic authentication using the given expressions for
username and password |
AuthBasicProvider provider-name
[provider-name] ... | file | dh | B |
Sets the authentication provider(s) for this location |
@@ -719,21 +719,21 @@ simultaneously
MaxSpareThreads number | | s | M |
Maximum number of idle threads |
MaxThreads number | 2048 | s | M |
Set the maximum number of worker threads |
MDBaseServer on|off | off | s | E |
Control if base server may be managed or only virtual hosts. |
-MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
-MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
-MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
-MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
+MDCAChallenges name [ name ... ] | tls-sni-01 http-01 | s | E |
Type of ACME challenge used to prove domain ownership. |
+MDCertificateAgreement url-of-terms-of-service | | s | E |
The URL of the Terms-of-Service document, that the CA server requires you to accept. |
+MDCertificateAuthority url | https://acme-v01.ap + | s | E |
The URL of the ACME Certificate Authority service. |
+MDCertificateProtocol protocol | ACME | s | E |
The protocol to use with the Certificate Authority. |
MDDriveMode always|auto|manual | auto | s | E |
Control when it is allowed to obtain/renew certificates. |
-MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
-MDMember hostname | | s | E |
Additional hostname for the managed domain. |
+MDHttpProxy url | | s | E |
Define a proxy for outgoing connections. |
+MDMember hostname | | s | E |
Additional hostname for the managed domain. |
MDMembers auto|manual | auto | s | E |
Control if the alias domain names are automatically added. |
MDMustStaple on|off | off | s | E |
Control if new certificates carry the OCSP Must Staple flag. |
-MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
+MDNotifyCmd path | | s | E |
Run a program when Managed Domain are ready. |
MDomain dns-name [ other-dns-name... ] [auto|manual] | | s | E |
Define list of domain names that belong to one group. |
<MDomainSet dns-name [ other-dns-name... ]>...</MDomainSet> | | s | E |
Container for directives applied to the same managed domains. |
-MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
-MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
-MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
+MDPortMap map1 [ map2 ] | 80:80 443:443 | s | E |
Map external to internal ports for domain ownership verification. |
+MDPrivateKeys type [ params... ] | RSA 2048 | s | E |
Set type and size of the private keys generated. |
+MDRenewWindow duration | 33% | s | E |
Control when a certificate will be renewed. |
MDRequireHttps off|temporary|permanent | off | s | E |
Redirects http: traffic to https: for Managed Domains. |
MDStoreDir path | md | s | E |
Path on the local file system to store the Managed Domains data. |
MemcacheConnTTL num[units] | 15s | sv | E |
Keepalive time for idle connections |
@@ -1079,7 +1079,7 @@ handshake
SSLHonorCipherOrder on|off | off | sv | E |
Option to prefer the server's cipher preference order |
SSLInsecureRenegotiation on|off | off | sv | E |
Option to enable support for insecure renegotiation |
SSLOCSDefaultResponder uri | | sv | E |
Set the default responder URI for OCSP validation |
-SSLOCSPEnable on|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
+SSLOCSPEnable on|leaf|off | off | sv | E |
Enable OCSP validation of the client certificate chain |
SSLOCSPNoverify On/Off | Off | sv | E |
skip the OCSP responder certificates verification |
SSLOCSPOverrideResponder on|off | off | sv | E |
Force use of the default responder URI for OCSP validation |
SSLOCSPProxyURL url | | sv | E |
Proxy URL to use for OCSP requests |