mirror of
https://github.com/apache/httpd.git
synced 2025-10-28 20:34:59 +03:00
e3fbbd9e2d
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@91752 13f79535-47bb-0310-9956-ffa450edef68
552 lines
28 KiB
HTML
552 lines
28 KiB
HTML
<html>
|
|
<head>
|
|
<title>mod_ssl: Compatibility</title>
|
|
|
|
<!--
|
|
Copyright (c) 1998-2001 Ralf S. Engelschall. All rights reserved.
|
|
|
|
Redistribution and use in source and binary forms, with or without
|
|
modification, are permitted provided that the following conditions
|
|
are met:
|
|
|
|
1. Redistributions of source code must retain the above
|
|
copyright notice, this list of conditions and the following
|
|
disclaimer.
|
|
|
|
2. Redistributions in binary form must reproduce the above
|
|
copyright notice, this list of conditions and the following
|
|
disclaimer in the documentation and/or other materials
|
|
provided with the distribution.
|
|
|
|
3. All advertising materials mentioning features or use of this
|
|
software must display the following acknowledgment:
|
|
"This product includes software developed by
|
|
Ralf S. Engelschall <rse@engelschall.com> for use in the
|
|
mod_ssl project (http://www.modssl.org/)."
|
|
|
|
4. The name "mod_ssl" must not be used to endorse or promote
|
|
products derived from this software without prior written
|
|
permission.
|
|
|
|
5. Redistributions of any form whatsoever must retain the
|
|
following acknowledgment:
|
|
"This product includes software developed by
|
|
Ralf S. Engelschall <rse@engelschall.com> for use in the
|
|
mod_ssl project (http://www.modssl.org/)."
|
|
|
|
THIS SOFTWARE IS PROVIDED BY RALF S. ENGELSCHALL ``AS IS'' AND ANY
|
|
EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
|
PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL RALF S. ENGELSCHALL OR
|
|
HIS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
-->
|
|
<style type="text/css"><!--
|
|
A:link {
|
|
text-decoration: none;
|
|
color: #6666cc;
|
|
}
|
|
A:active {
|
|
text-decoration: none;
|
|
color: #6666cc;
|
|
}
|
|
A:visited {
|
|
text-decoration: none;
|
|
color: #6666cc;
|
|
}
|
|
#sf {
|
|
font-family: arial,helvetica;
|
|
font-variant: normal;
|
|
font-style: normal;
|
|
}
|
|
H1 {
|
|
font-weight: bold;
|
|
font-size: 24pt;
|
|
line-height: 24pt;
|
|
font-family: arial,helvetica;
|
|
font-variant: normal;
|
|
font-style: normal;
|
|
}
|
|
H2 {
|
|
font-weight: bold;
|
|
font-size: 18pt;
|
|
line-height: 18pt;
|
|
font-family: arial,helvetica;
|
|
font-variant: normal;
|
|
font-style: normal;
|
|
}
|
|
H3 {
|
|
font-weight: bold;
|
|
font-size: 14pt;
|
|
line-height: 14pt;
|
|
font-family: arial,helvetica;
|
|
font-variant: normal;
|
|
font-style: normal;
|
|
}
|
|
H4 {
|
|
font-weight: bold;
|
|
font-size: 12pt;
|
|
line-height: 12pt;
|
|
font-family: arial,helvetica;
|
|
font-variant: normal;
|
|
font-style: normal;
|
|
}
|
|
#H {
|
|
}
|
|
#D {
|
|
background-color: #f0f0f0;
|
|
}
|
|
#faq {
|
|
font-weight: bold;
|
|
font-size: 16pt;
|
|
line-height: 16pt;
|
|
font-family: arial,helvetica;
|
|
font-variant: normal;
|
|
font-style: normal;
|
|
}
|
|
#howto {
|
|
font-weight: bold;
|
|
font-size: 16pt;
|
|
line-height: 16pt;
|
|
font-family: arial,helvetica;
|
|
font-variant: normal;
|
|
font-style: normal;
|
|
}
|
|
#term {
|
|
font-weight: bold;
|
|
font-size: 16pt;
|
|
line-height: 16pt;
|
|
font-family: arial,helvetica;
|
|
font-variant: normal;
|
|
font-style: normal;
|
|
}
|
|
--></style>
|
|
<script type="text/javascript" language="JavaScript">
|
|
<!-- Hiding the code
|
|
function ro_imgNormal(imgName) {
|
|
if (document.images) {
|
|
document[imgName].src = eval(imgName + '_n.src');
|
|
self.status = '';
|
|
}
|
|
}
|
|
function ro_imgOver(imgName, descript) {
|
|
if (document.images) {
|
|
document[imgName].src = eval(imgName + '_o.src');
|
|
self.status = descript;
|
|
}
|
|
}
|
|
// done hiding -->
|
|
</script>
|
|
<script type="text/javascript" language="JavaScript">
|
|
<!-- Hiding the code
|
|
if (document.images) {
|
|
ro_img_prev_top_n = new Image();
|
|
ro_img_prev_top_n.src = 'ssl_template.navbut-prev-n.gif';
|
|
ro_img_prev_top_o = new Image();
|
|
ro_img_prev_top_o.src = 'ssl_template.navbut-prev-s.gif';
|
|
}
|
|
// done hiding -->
|
|
</script>
|
|
<script type="text/javascript" language="JavaScript">
|
|
<!-- Hiding the code
|
|
if (document.images) {
|
|
ro_img_prev_bot_n = new Image();
|
|
ro_img_prev_bot_n.src = 'ssl_template.navbut-prev-n.gif';
|
|
ro_img_prev_bot_o = new Image();
|
|
ro_img_prev_bot_o.src = 'ssl_template.navbut-prev-s.gif';
|
|
}
|
|
// done hiding -->
|
|
</script>
|
|
<script type="text/javascript" language="JavaScript">
|
|
<!-- Hiding the code
|
|
if (document.images) {
|
|
ro_img_next_top_n = new Image();
|
|
ro_img_next_top_n.src = 'ssl_template.navbut-next-n.gif';
|
|
ro_img_next_top_o = new Image();
|
|
ro_img_next_top_o.src = 'ssl_template.navbut-next-s.gif';
|
|
}
|
|
// done hiding -->
|
|
</script>
|
|
<script type="text/javascript" language="JavaScript">
|
|
<!-- Hiding the code
|
|
if (document.images) {
|
|
ro_img_next_bot_n = new Image();
|
|
ro_img_next_bot_n.src = 'ssl_template.navbut-next-n.gif';
|
|
ro_img_next_bot_o = new Image();
|
|
ro_img_next_bot_o.src = 'ssl_template.navbut-next-s.gif';
|
|
}
|
|
// done hiding -->
|
|
</script>
|
|
</head>
|
|
<body bgcolor="#ffffff" text="#000000" link="#333399" alink="#9999ff" vlink="#000066">
|
|
<div align="center">
|
|
<table width="600" cellspacing="0" cellpadding="0" border="0" summary="">
|
|
<tr>
|
|
<td>
|
|
<img src="ssl_template.imgdot-1x1-transp.gif" alt="" width="600" height="1" align="bottom" border="0"><br>
|
|
<table width="600" cellspacing="0" cellpadding="0" summary="">
|
|
<tr>
|
|
<td>
|
|
<table width="600" summary="">
|
|
<tr>
|
|
<td align="left" valign="bottom">
|
|
<font face="Arial,Helvetica" size="+2"><b>mod_ssl</b></font>
|
|
</td>
|
|
<td align="right">
|
|
<img src="ssl_template.head-chapter.gif" alt="Chapter" width="175" height="94"> <img src="ssl_template.head-num-4.gif" alt="4" width="74" height="89">
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td><img src="ssl_template.imgdot-1x1-000000.gif" alt="" width="600" height="2" align="bottom" border="0"></td>
|
|
</tr>
|
|
<tr>
|
|
<td>
|
|
<table width="600" border="0" summary="">
|
|
<tr>
|
|
<td valign="top" align="left" width="250">
|
|
<a href="ssl_reference.html" onmouseover="ro_imgOver('ro_img_prev_top', 'previous page'); return true" onmouseout="ro_imgNormal('ro_img_prev_top'); return true" onfocus="ro_imgOver('ro_img_prev_top', 'previous page'); return true" onblur="ro_imgNormal('ro_img_prev_top'); return true"><img name="ro_img_prev_top" src="ssl_template.navbut-prev-n.gif" alt="previous page" width="70" height="18" border="0"></a><br><font color="#000000">Reference</font>
|
|
</td>
|
|
<td valign="top" align="right" width="250">
|
|
<a href="ssl_howto.html" onmouseover="ro_imgOver('ro_img_next_top', 'next page'); return true" onmouseout="ro_imgNormal('ro_img_next_top'); return true" onfocus="ro_imgOver('ro_img_next_top', 'next page'); return true" onblur="ro_imgNormal('ro_img_next_top'); return true"><img name="ro_img_next_top" src="ssl_template.navbut-next-n.gif" alt="next page" width="70" height="18" border="0"></a><br><font color="#000000">HowTo</font>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>
|
|
<br>
|
|
<img src="ssl_template.title-compat.gif" alt="Compatibility" width="456" height="60">
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<div align="right">
|
|
<table cellspacing="0" cellpadding="0" width="200" summary="">
|
|
<tr>
|
|
<td>
|
|
<em>
|
|
All PCs are compatible. But some of
|
|
them are more compatible than others.
|
|
</em>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td align="right">
|
|
<font size="-1">
|
|
Unknown
|
|
</font>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</div>
|
|
<p>
|
|
<table cellspacing="0" cellpadding="0" border="0" summary="">
|
|
<tr valign="bottom">
|
|
<td>
|
|
<img src="ssl_compat.gfont000.gif" alt="H" width="40" height="34" border="0" align="left">
|
|
ere we talk about backward compatibility to other SSL solutions. As you
|
|
perhaps know, mod_ssl is not the only existing SSL solution for Apache.
|
|
Actually there are four additional major products available on the market: Ben
|
|
Laurie's freely available <a href="http://www.apache-ssl.org/">Apache-SSL</a>
|
|
(from where mod_ssl were originally derived in 1998), RedHat's commercial <a
|
|
href="http://www.redhat.com/products/product-details.phtml?id=rhsa">Secure Web
|
|
Server</a> (which is based on mod_ssl), Covalent's commercial <a
|
|
href="http://raven.covalent.net/">Raven SSL Module</a> (also based on mod_ssl)
|
|
and finally C2Net's commercial product <a
|
|
href="http://www.c2.net/products/stronghold/">Stronghold</a> (based on a
|
|
different evolution branch named Sioux up to Stronghold 2.x and based on
|
|
mod_ssl since Stronghold 3.x).
|
|
</td>
|
|
<td>
|
|
|
|
</td>
|
|
<td>
|
|
<div align="right">
|
|
<table cellspacing="0" cellpadding="5" border="0" bgcolor="#ccccff" summary="">
|
|
<tr>
|
|
<td bgcolor="#333399">
|
|
<font face="Arial,Helvetica" color="#ccccff">
|
|
<b>Table Of Contents</b>
|
|
</font>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td>
|
|
<font face="Arial,Helvetica" size="-1">
|
|
<a href="#ToC1"><strong>Configuration Directives</strong></a><br>
|
|
<a href="#ToC2"><strong>Environment Variables</strong></a><br>
|
|
<a href="#ToC3"><strong>Custom Log Functions</strong></a><br>
|
|
</font>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
<p>
|
|
The idea in mod_ssl is mainly the following: because mod_ssl provides mostly a
|
|
superset of the functionality of all other solutions we can easily provide
|
|
backward compatibility for most of the cases. Actually there are three
|
|
compatibility areas we currently address: configuration directives,
|
|
environment variables and custom log functions.
|
|
<h2><a name="ToC1">Configuration Directives</a></h2>
|
|
For backward compatibility to the configuration directives of other SSL
|
|
solutions we do an on-the-fly mapping: directives which have a direct
|
|
counterpart in mod_ssl are mapped silently while other directives lead to a
|
|
warning message in the logfiles. The currently implemented directive mapping
|
|
is listed in <a href="#table1">Table 1</a>. Currently full backward
|
|
compatibilty is provided only for Apache-SSL 1.x and mod_ssl 2.0.x.
|
|
Compatibility to Sioux 1.x and Stronghold 2.x is only partial because of
|
|
special functionality in these interfaces which mod_ssl (still) doesn't
|
|
provide.
|
|
<p>
|
|
<div align="center">
|
|
<a name="table1"></a>
|
|
<table width="600" cellspacing="0" cellpadding="1" border="0" summary="">
|
|
<caption align="bottom" id="sf">Table 1: Configuration Directive Mapping</caption>
|
|
<tr><td bgcolor="#cccccc">
|
|
<table width="598" cellpadding="5" cellspacing="0" border="0" summary="">
|
|
<tr><td valign="top" align="center" bgcolor="#ffffff">
|
|
<table border="0" cellspacing="0" cellpadding="2" width="598" summary="">
|
|
<tr id="D">
|
|
<td><strong>Old Directive</strong></td>
|
|
<td><strong>mod_ssl Directive</strong></td>
|
|
<td><strong>Comment</strong></td>
|
|
</tr>
|
|
<tr id="H"><td colspan="3"><b>Apache-SSL 1.x & mod_ssl 2.0.x compatibility:</b></td></tr>
|
|
<tr id="D"><td><code>SSLEnable</code></td><td><code>SSLEngine on</code></td><td>compactified</td></tr>
|
|
<tr id="H"><td><code>SSLDisable</code></td><td><code>SSLEngine off</code></td><td>compactified</td></tr>
|
|
<tr id="D"><td><code>SSLLogFile</code> <em>file</em></td><td><code>SSLLog</code> <em>file</em></td><td>compactified</td></tr>
|
|
<tr id="H"><td><code>SSLRequiredCiphers</code> <em>spec</em></td><td><code>SSLCipherSuite</code> <em>spec</em></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSLRequireCipher</code> <em>c1</em> ...</td><td><code>SSLRequire %{SSL_CIPHER} in {"</code><em>c1</em><code>", ...}</code></td><td>generalized</td></tr>
|
|
<tr id="H"><td><code>SSLBanCipher</code> <em>c1</em> ...</td><td><code>SSLRequire not (%{SSL_CIPHER} in {"</code><em>c1</em><code>", ...})</code></td><td>generalized</td></tr>
|
|
<tr id="D"><td><code>SSLFakeBasicAuth</td><td><code>SSLOptions +FakeBasicAuth</code></td><td>merged</td></tr>
|
|
<tr id="H"><td><code>SSLCacheServerPath</code> <em>dir</em></td><td>-</td><td>functionality removed</td></tr>
|
|
<tr id="D"><td><code>SSLCacheServerPort</code> <em>integer</em></td><td>-</td><td>functionality removed</td></tr>
|
|
<tr id="H"><td colspan="3"><b>Apache-SSL 1.x compatibility:</b></td></tr>
|
|
<tr id="D"><td><code>SSLExportClientCertificates</td><td><code>SSLOptions +ExportCertData</code></td><td>merged</td></tr>
|
|
<tr id="H"><td><code>SSLCacheServerRunDir</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="D"><td colspan="3"><b>Sioux 1.x compatibility:</b></td></tr>
|
|
<tr id="H"><td><code>SSL_CertFile</code> <em>file</em></td><td><code>SSLCertificateFile</code> <em>file</em></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_KeyFile</code> <em>file</em></td><td><code>SSLCertificateKeyFile</code> <em>file</em></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CipherSuite</code> <em>arg</em></td><td><code>SSLCipherSuite</code> <em>arg</em></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_X509VerifyDir</code> <em>arg</em></td><td><code>SSLCACertificatePath</code> <em>arg</em></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_Log</code> <em>file</em></td><td><code>SSLLogFile</code> <em>file</em></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_Connect</code> <em>flag</em></td><td><code>SSLEngine</code> <em>flag</em></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_ClientAuth</code> <em>arg</em></td><td><code>SSLVerifyClient</code> <em>arg</em></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_X509VerifyDepth</code> <em>arg</em></td><td><code>SSLVerifyDepth</code> <em>arg</em></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_FetchKeyPhraseFrom</code> <em>arg</em></td><td>-</td><td>not directly mappable; use SSLPassPhraseDialog</td></tr>
|
|
<tr id="D"><td><code>SSL_SessionDir</code> <em>dir</em></td><td>-</td><td>not directly mappable; use SSLSessionCache</td></tr>
|
|
<tr id="H"><td><code>SSL_Require</code> <em>expr</em></td><td>-</td><td>not directly mappable; use SSLRequire</td></tr>
|
|
<tr id="D"><td><code>SSL_CertFileType</code> <em>arg</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>SSL_KeyFileType</code> <em>arg</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="D"><td><code>SSL_X509VerifyPolicy</code> <em>arg</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>SSL_LogX509Attributes</code> <em>arg</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="D"><td colspan="3"><b>Stronghold 2.x compatibility:</b></td></tr>
|
|
<tr id="H"><td><code>StrongholdAccelerator</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>StrongholdKey</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>StrongholdLicenseFile</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>SSLFlag</code> <em>flag</em></td><td><code>SSLEngine</code> <em>flag</em></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSLSessionLockFile</code> <em>file</em></td><td><code>SSLMutex</code> <em>file</em></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSLCipherList</code> <em>spec</em></td><td><code>SSLCipherSuite</code> <em>spec</em></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>RequireSSL</code></td><td><code>SSLRequireSSL</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSLErrorFile</code> <em>file</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>SSLRoot</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="D"><td><code>SSL_CertificateLogDir</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>AuthCertDir</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="D"><td><code>SSL_Group</code> <em>name</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>SSLProxyMachineCertPath</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="D"><td><code>SSLProxyMachineCertFile</code> <em>file</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>SSLProxyCACertificatePath</code> <em>dir</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="D"><td><code>SSLProxyCACertificateFile</code> <em>file</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="H"><td><code>SSLProxyVerifyDepth</code> <em>number</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
<tr id="D"><td><code>SSLProxyCipherList</code> <em>spec</em></td><td>-</td><td>functionality not supported</td></tr>
|
|
</table>
|
|
</td>
|
|
</tr></table>
|
|
</td></tr></table>
|
|
</div>
|
|
<p>
|
|
<br>
|
|
<h2><a name="ToC2">Environment Variables</a></h2>
|
|
When you use ``<code>SSLOptions +CompatEnvVars</code>'' additional environment
|
|
variables are generated. They all correspond to existing official mod_ssl
|
|
variables. The currently implemented variable derivation is listed in <a
|
|
href="#table2">Table 2</a>.
|
|
<p>
|
|
<div align="center">
|
|
<a name="table2"></a>
|
|
<table width="600" cellspacing="0" cellpadding="1" border="0" summary="">
|
|
<caption align="bottom" id="sf">Table 2: Environment Variable Derivation</caption>
|
|
<tr><td bgcolor="#cccccc">
|
|
<table width="598" cellpadding="5" cellspacing="0" border="0" summary="">
|
|
<tr><td valign="top" align="center" bgcolor="#ffffff">
|
|
<table border="0" cellspacing="0" cellpadding="2" width="598" summary="">
|
|
<tr id="D">
|
|
<td><strong>Old Variable</strong></td>
|
|
<td><strong>mod_ssl Variable</strong></td>
|
|
<td><strong>Comment</strong></td>
|
|
</tr>
|
|
<tr id="H"><td><code>SSL_PROTOCOL_VERSION</code></td><td><code>SSL_PROTOCOL</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSLEAY_VERSION</code></td><td><code>SSL_VERSION_LIBRARY</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>HTTPS_SECRETKEYSIZE</code></td><td><code>SSL_CIPHER_USEKEYSIZE</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>HTTPS_KEYSIZE</code></td><td><code>SSL_CIPHER_ALGKEYSIZE</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>HTTPS_CIPHER</code></td><td><code>SSL_CIPHER</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>HTTPS_EXPORT</code></td><td><code>SSL_CIPHER_EXPORT</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_KEY_SIZE</code></td><td><code>SSL_CIPHER_ALGKEYSIZE</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_CERTIFICATE</code></td><td><code>SSL_SERVER_CERT</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_CERT_START</code></td><td><code>SSL_SERVER_V_START</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_CERT_END</code></td><td><code>SSL_SERVER_V_END</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_CERT_SERIAL</code></td><td><code>SSL_SERVER_M_SERIAL</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_SIGNATURE_ALGORITHM</code></td><td><code>SSL_SERVER_A_SIG</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_DN</code></td><td><code>SSL_SERVER_S_DN</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_CN</code></td><td><code>SSL_SERVER_S_DN_CN</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_EMAIL</code></td><td><code>SSL_SERVER_S_DN_Email</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_O</code></td><td><code>SSL_SERVER_S_DN_O</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_OU</code></td><td><code>SSL_SERVER_S_DN_OU</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_C</code></td><td><code>SSL_SERVER_S_DN_C</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_SP</code></td><td><code>SSL_SERVER_S_DN_SP</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_L</code></td><td><code>SSL_SERVER_S_DN_L</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_IDN</code></td><td><code>SSL_SERVER_I_DN</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_ICN</code></td><td><code>SSL_SERVER_I_DN_CN</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_IEMAIL</code></td><td><code>SSL_SERVER_I_DN_Email</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_IO</code></td><td><code>SSL_SERVER_I_DN_O</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_IOU</code></td><td><code>SSL_SERVER_I_DN_OU</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_IC</code></td><td><code>SSL_SERVER_I_DN_C</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_ISP</code></td><td><code>SSL_SERVER_I_DN_SP</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_IL</code></td><td><code>SSL_SERVER_I_DN_L</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_CERTIFICATE</code></td><td><code>SSL_CLIENT_CERT</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_CERT_START</code></td><td><code>SSL_CLIENT_V_START</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_CERT_END</code></td><td><code>SSL_CLIENT_V_END</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_CERT_SERIAL</code></td><td><code>SSL_CLIENT_M_SERIAL</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_SIGNATURE_ALGORITHM</code></td><td><code>SSL_CLIENT_A_SIG</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_DN</code></td><td><code>SSL_CLIENT_S_DN</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_CN</code></td><td><code>SSL_CLIENT_S_DN_CN</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_EMAIL</code></td><td><code>SSL_CLIENT_S_DN_Email</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_O</code></td><td><code>SSL_CLIENT_S_DN_O</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_OU</code></td><td><code>SSL_CLIENT_S_DN_OU</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_C</code></td><td><code>SSL_CLIENT_S_DN_C</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_SP</code></td><td><code>SSL_CLIENT_S_DN_SP</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_L</code></td><td><code>SSL_CLIENT_S_DN_L</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_IDN</code></td><td><code>SSL_CLIENT_I_DN</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_ICN</code></td><td><code>SSL_CLIENT_I_DN_CN</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_IEMAIL</code></td><td><code>SSL_CLIENT_I_DN_Email</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_IO</code></td><td><code>SSL_CLIENT_I_DN_O</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_IOU</code></td><td><code>SSL_CLIENT_I_DN_OU</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_IC</code></td><td><code>SSL_CLIENT_I_DN_C</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_ISP</code></td><td><code>SSL_CLIENT_I_DN_SP</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_IL</code></td><td><code>SSL_CLIENT_I_DN_L</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_EXPORT</code></td><td><code>SSL_CIPHER_EXPORT</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_KEYSIZE</code></td><td><code>SSL_CIPHER_ALGKEYSIZE</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SECKEYSIZE</code></td><td><code>SSL_CIPHER_USEKEYSIZE</code></td><td>renamed</td></tr>
|
|
<tr id="H"><td><code>SSL_SSLEAY_VERSION</code></td><td><code>SSL_VERSION_LIBRARY</code></td><td>renamed</td></tr>
|
|
<tr id="D"><td><code>SSL_STRONG_CRYPTO</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_KEY_EXP</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_KEY_ALGORITHM</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_KEY_SIZE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_SESSIONDIR</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_CERTIFICATELOGDIR</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_CERTFILE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="D"><td><code>SSL_SERVER_KEYFILE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="H"><td><code>SSL_SERVER_KEYFILETYPE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_KEY_EXP</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="H"><td><code>SSL_CLIENT_KEY_ALGORITHM</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
<tr id="D"><td><code>SSL_CLIENT_KEY_SIZE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>
|
|
</table>
|
|
</td>
|
|
</tr></table>
|
|
</td></tr></table>
|
|
</div>
|
|
<p>
|
|
<br>
|
|
<h2><a name="ToC3">Custom Log Functions</a></h2>
|
|
When mod_ssl is built into Apache or at least loaded (under DSO situation)
|
|
additional functions exist for the <a
|
|
href="../mod_log_config.html#formats">Custom Log Format</a> of <a
|
|
href="../mod_log_config.html">mod_log_config</a> as documented in the Reference
|
|
Chapter. Beside the ``<code>%{</code><em>varname</em><code>}x</code>''
|
|
eXtension format function which can be used to expand any variables provided
|
|
by any module, an additional Cryptography
|
|
``<code>%{</code><em>name</em><code>}c</code>'' cryptography format function
|
|
exists for backward compatibility. The currently implemented function calls
|
|
are listed in <a href="#table3">Table 3</a>.
|
|
<p>
|
|
<div align="center">
|
|
<a name="table3"></a>
|
|
<table width="600" cellspacing="0" cellpadding="1" border="0" summary="">
|
|
<caption align="bottom" id="sf">Table 3: Custom Log Cryptography Function</caption>
|
|
<tr><td bgcolor="#cccccc">
|
|
<table width="598" cellpadding="5" cellspacing="0" border="0" summary="">
|
|
<tr><td valign="top" align="center" bgcolor="#ffffff">
|
|
<table border="0" cellspacing="0" cellpadding="2" width="598" summary="">
|
|
<tr id="H">
|
|
<td><strong>Function Call</strong></td>
|
|
<td><strong>Description</strong></td>
|
|
</tr>
|
|
<tr id="D"><td><code>%...{version}c</code></td> <td>SSL protocol version</td></tr>
|
|
<tr id="H"><td><code>%...{cipher}c</code></td> <td>SSL cipher</td></tr>
|
|
<tr id="D"><td><code>%...{subjectdn}c</code></td> <td>Client Certificate Subject Distinguished Name</td></tr>
|
|
<tr id="H"><td><code>%...{issuerdn}c</code></td> <td>Client Certificate Issuer Distinguished Name</td></tr>
|
|
<tr id="D"><td><code>%...{errcode}c</code></td> <td>Certificate Verification Error (numerical)</td></tr>
|
|
<tr id="H"><td><code>%...{errstr}c</code></td> <td>Certificate Verification Error (string)</td></tr>
|
|
</table>
|
|
</td>
|
|
</tr></table>
|
|
</td></tr></table>
|
|
</div>
|
|
<p>
|
|
<br>
|
|
<table summary="">
|
|
<tr>
|
|
<td>
|
|
<table width="600" border="0" summary="">
|
|
<tr>
|
|
<td valign="top" align="left" width="250">
|
|
<a href="ssl_reference.html" onmouseover="ro_imgOver('ro_img_prev_bot', 'previous page'); return true" onmouseout="ro_imgNormal('ro_img_prev_bot'); return true" onfocus="ro_imgOver('ro_img_prev_bot', 'previous page'); return true" onblur="ro_imgNormal('ro_img_prev_bot'); return true"><img name="ro_img_prev_bot" src="ssl_template.navbut-prev-n.gif" alt="previous page" width="70" height="18" border="0"></a><br><font color="#000000">Reference</font>
|
|
</td>
|
|
<td valign="top" align="right" width="250">
|
|
<a href="ssl_howto.html" onmouseover="ro_imgOver('ro_img_next_bot', 'next page'); return true" onmouseout="ro_imgNormal('ro_img_next_bot'); return true" onfocus="ro_imgOver('ro_img_next_bot', 'next page'); return true" onblur="ro_imgNormal('ro_img_next_bot'); return true"><img name="ro_img_next_bot" src="ssl_template.navbut-next-n.gif" alt="next page" width="70" height="18" border="0"></a><br><font color="#000000">HowTo</font>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td><img src="ssl_template.imgdot-1x1-000000.gif" alt="" width="600" height="2" align="bottom" border="0"></td>
|
|
</tr>
|
|
<tr>
|
|
<td><table width="598" summary="">
|
|
<tr>
|
|
<td align="left"><font face="Arial,Helvetica">
|
|
<a href="http://www.modssl.org/">mod_ssl</a> 2.8, User Manual<br>
|
|
The Apache Interface to OpenSSL
|
|
</font>
|
|
</td>
|
|
<td align="right"><font face="Arial,Helvetica">
|
|
Copyright © 1998-2001
|
|
<a href="http://www.engelschall.com/">Ralf S. Engelschall</a><br>
|
|
All Rights Reserved<br>
|
|
</font>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</div>
|
|
</body>
|
|
</html>
|