src - OpenBSD base system

diff options


context:
space:
mode:

author	Brad Smith <brad@cvs.openbsd.org>	2000-08-15 13:11:22 +0000
committer	Brad Smith <brad@cvs.openbsd.org>	2000-08-15 13:11:22 +0000
commit	d0832169edd2455a42173e7a78f6225d1a426b5b (patch)
tree	30d9a25751f4ed848193d4b1ae2ea676db8be936 /usr.sbin/httpd/htdocs
parent	ccb8aa83a7f2a9963e4438f7f7ce4ccbce7772ff (diff)

merge mod_ssl 2.6.6

Diffstat (limited to 'usr.sbin/httpd/htdocs')

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/index.html

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_compat.html

220

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.html

472

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.wml

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_glossary.html

182

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_howto.html

387

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_howto.wml

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_intro.gfont000.gif

bin

156 -> 156 bytes

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_intro.html

288

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_overview.html

204

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_overview.wml

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_reference.html

496

-rw-r--r--

usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_template.inc

13 files changed, 1224 insertions, 1226 deletions

diff --git a/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/index.html b/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/index.html
index 30ea742cde1..8aa0c8e7672 100644
--- a/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/index.html
+++ b/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/index.html

@@ -127,23 +127,49 @@ H4 {

font-style: normal;

}

--></style>

+<script type="text/javascript" language="JavaScript">

+<!-- Hiding the code

+function ro_imgNormal(imgName) {

+ if (document.images) {

+ document[imgName].src = eval(imgName + '_n.src');

+ self.status = '';

+ }

+function ro_imgOver(imgName, descript) {

+ if (document.images) {

+ document[imgName].src = eval(imgName + '_o.src');

+ self.status = descript;

+ }

+// done hiding -->

+</script>

+<script type="text/javascript" language="JavaScript">

+<!-- Hiding the code

+if (document.images) {

+ ro_img_unknown1_n = new Image();

+ ro_img_unknown1_n.src = 'ssl_template.navbut-next-n.gif';

+ ro_img_unknown1_o = new Image();

+ ro_img_unknown1_o.src = 'ssl_template.navbut-next-s.gif';

+// done hiding -->

+</script>

</head>

-<table width="600" cellspacing="0" cellpadding="0" border="0">

+<table width="600" cellspacing="0" cellpadding="0" border="0" summary="">

<tr>

<td>

<br>

-<table cellspacing="0" cellpadding="0" border="0">

+<table cellspacing="0" cellpadding="0" border="0" summary="">

<tr>

<td>

- <table cellspacing="0" cellpadding="0" border="0">

+ <table cellspacing="0" cellpadding="0" border="0" summary="">

<tr>

<td>

<img

src="ssl_cover_title.jpg"

- alt="User Manual"

- width="421" height="73">

+ alt="User Manual" width="421" height="73"

</td>

</tr>

<tr>

@@ -162,8 +188,8 @@ H4 {

><img

src="ssl_cover_logo.jpg"

alt="mod_ssl - The Apache Interface to OpenSSL"

- border="0"

- width="504" height="231"></a>

+ border="0" width="504" height="231"

+></a>

</td>

</tr>

<tr>

@@ -179,42 +205,7 @@ H4 {

</td>

-<script type="text/javascript" language="JavaScript">

-<!-- Hiding the code

-function ro_imgNormal(imgName) {

- if (document.images) {

- document[imgName].src = eval(imgName + "_n.src");

- self.status = '';

- }

-function ro_imgOver(imgName, descript) {

- if (document.images) {

- document[imgName].src = eval(imgName + "_o.src");

- self.status = descript;

- }

-// done hiding -->

-</script>

-<script type="text/javascript" language="JavaScript">

-<!-- Hiding the code

-if (document.images) {

- ro_img_unknown1_n = new Image();

- ro_img_unknown1_n.src = "ssl_template.navbut-next-n.gif";

- ro_img_unknown1_o = new Image();

- ro_img_unknown1_o.src = "ssl_template.navbut-next-s.gif";

-// done hiding -->

-</script>

-<a href="ssl_overview.html"

- onMouseOver="ro_imgOver('ro_img_unknown1', 'next page'); return true"

- onMouseOut="ro_imgNormal('ro_img_unknown1'); return true"

-><img

- name="ro_img_unknown1"

- src="ssl_template.navbut-next-n.gif"

- alt="next page"

- width="70" height="18"

- border="0"

-></a><br>Overview

+<a href="ssl_overview.html" onmouseover="ro_imgOver('ro_img_unknown1', 'next page'); return true" onmouseout="ro_imgNormal('ro_img_unknown1'); return true" onfocus="ro_imgOver('ro_img_unknown1', 'next page'); return true" onblur="ro_imgNormal('ro_img_unknown1'); return true"><img name="ro_img_unknown1" src="ssl_template.navbut-next-n.gif" alt="next page" width="70" height="18" border="0"></a><br>Overview

</td>

<td>

diff --git a/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_compat.html b/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_compat.html
index 19875dfb13f..8c49c2cc711 100644
--- a/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_compat.html
+++ b/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_compat.html

@@ -127,47 +127,17 @@ H4 {

font-style: normal;

}

--></style>

-</head>

-<body bgcolor="#ffffff" text="#000000" link="#333399" alink="#9999ff" vlink="#000066">

-<div align="center">

-<table width="600" cellspacing="0" cellpadding="0" border="0">

-<tr>

- <td>

- <img src="ssl_template.imgdot-1x1-transp.gif" alt="" width="600" height="1" align="bottom" border="0"><br>

- <table width="600" cellspacing="0" cellpadding="0">

- <tr>

- <td>

- <table width="600">

- <tr>

- <td align="left" valign="bottom">

- <font face="Arial,Helvetica" size="+2"><b>mod_ssl</b></font>

- </td>

- <td align="right">

- <img src="ssl_template.head-chapter.gif" alt="Chapter" width="175" height="94"> <img src="ssl_template.head-num-4.gif" alt="4" width="74" height="89">

- </td>

- </tr>

- </table>

- </td>

- </tr>

- <tr>

- <td><img src="ssl_template.imgdot-1x1-000000.gif" alt="" width="600" height="2" align="bottom" border="0"></td>

- </tr>

- <tr>

- <td>

- <table width="600" border="0">

- <tr>

- <td valign="top" align="left" width="250">

<!-- Hiding the code

function ro_imgNormal(imgName) {

if (document.images) {

- document[imgName].src = eval(imgName + "_n.src");

+ document[imgName].src = eval(imgName + '_n.src');

self.status = '';

}

function ro_imgOver(imgName, descript) {

if (document.images) {

- document[imgName].src = eval(imgName + "_o.src");

+ document[imgName].src = eval(imgName + '_o.src');

self.status = descript;

}

@@ -177,44 +147,76 @@ function ro_imgOver(imgName, descript) {

<!-- Hiding the code

if (document.images) {

ro_img_prev_top_n = new Image();

- ro_img_prev_top_n.src = "ssl_template.navbut-prev-n.gif";

+ ro_img_prev_top_n.src = 'ssl_template.navbut-prev-n.gif';

ro_img_prev_top_o = new Image();

- ro_img_prev_top_o.src = "ssl_template.navbut-prev-s.gif";

+ ro_img_prev_top_o.src = 'ssl_template.navbut-prev-s.gif';

+// done hiding -->

+</script>

+<script type="text/javascript" language="JavaScript">

+<!-- Hiding the code

+if (document.images) {

+ ro_img_prev_bot_n = new Image();

+ ro_img_prev_bot_n.src = 'ssl_template.navbut-prev-n.gif';

+ ro_img_prev_bot_o = new Image();

+ ro_img_prev_bot_o.src = 'ssl_template.navbut-prev-s.gif';

}

// done hiding -->

</script>

-<a href="ssl_reference.html"

- onMouseOver="ro_imgOver('ro_img_prev_top', 'previous page'); return true"

- onMouseOut="ro_imgNormal('ro_img_prev_top'); return true"

-><img

- name="ro_img_prev_top"

- src="ssl_template.navbut-prev-n.gif"

- alt="previous page"

- width="70" height="18"

- border="0"

-></a><br><font color="#000000">Reference</font>

- </td>

- <td valign="top" align="right" width="250">

<!-- Hiding the code

if (document.images) {

ro_img_next_top_n = new Image();

- ro_img_next_top_n.src = "ssl_template.navbut-next-n.gif";

+ ro_img_next_top_n.src = 'ssl_template.navbut-next-n.gif';

ro_img_next_top_o = new Image();

- ro_img_next_top_o.src = "ssl_template.navbut-next-s.gif";

+ ro_img_next_top_o.src = 'ssl_template.navbut-next-s.gif';

}

// done hiding -->

</script>

-<a href="ssl_howto.html"

- onMouseOver="ro_imgOver('ro_img_next_top', 'next page'); return true"

- onMouseOut="ro_imgNormal('ro_img_next_top'); return true"

-><img

- name="ro_img_next_top"

- src="ssl_template.navbut-next-n.gif"

- alt="next page"

- width="70" height="18"

- border="0"

-></a><br><font color="#000000">HowTo</font>

+<script type="text/javascript" language="JavaScript">

+<!-- Hiding the code

+if (document.images) {

+ ro_img_next_bot_n = new Image();

+ ro_img_next_bot_n.src = 'ssl_template.navbut-next-n.gif';

+ ro_img_next_bot_o = new Image();

+ ro_img_next_bot_o.src = 'ssl_template.navbut-next-s.gif';

+// done hiding -->

+</script>

+</head>

+<body bgcolor="#ffffff" text="#000000" link="#333399" alink="#9999ff" vlink="#000066">

+<div align="center">

+<table width="600" cellspacing="0" cellpadding="0" border="0" summary="">

+<tr>

+ <td>

+ <img src="ssl_template.imgdot-1x1-transp.gif" alt="" width="600" height="1" align="bottom" border="0"><br>

+ <table width="600" cellspacing="0" cellpadding="0" summary="">

+ <tr>

+ <td>

+ <table width="600" summary="">

+ <tr>

+ <td align="left" valign="bottom">

+ <font face="Arial,Helvetica" size="+2"><b>mod_ssl</b></font>

+ </td>

+ <td align="right">

+ <img src="ssl_template.head-chapter.gif" alt="Chapter" width="175" height="94"> <img src="ssl_template.head-num-4.gif" alt="4" width="74" height="89">

+ </td>

+ </tr>

+ </table>

+ </td>

+ </tr>

+ <tr>

+ <td><img src="ssl_template.imgdot-1x1-000000.gif" alt="" width="600" height="2" align="bottom" border="0"></td>

+ </tr>

+ <tr>

+ <td>

+ <table width="600" border="0" summary="">

+ <tr>

+ <td valign="top" align="left" width="250">

+<a href="ssl_reference.html" onmouseover="ro_imgOver('ro_img_prev_top', 'previous page'); return true" onmouseout="ro_imgNormal('ro_img_prev_top'); return true" onfocus="ro_imgOver('ro_img_prev_top', 'previous page'); return true" onblur="ro_imgNormal('ro_img_prev_top'); return true"><img name="ro_img_prev_top" src="ssl_template.navbut-prev-n.gif" alt="previous page" width="70" height="18" border="0"></a><br><font color="#000000">Reference</font>

+ </td>

+ <td valign="top" align="right" width="250">

+<a href="ssl_howto.html" onmouseover="ro_imgOver('ro_img_next_top', 'next page'); return true" onmouseout="ro_imgNormal('ro_img_next_top'); return true" onfocus="ro_imgOver('ro_img_next_top', 'next page'); return true" onblur="ro_imgNormal('ro_img_next_top'); return true"><img name="ro_img_next_top" src="ssl_template.navbut-next-n.gif" alt="next page" width="70" height="18" border="0"></a><br><font color="#000000">HowTo</font>

</td>

</tr>

</table>

@@ -222,17 +224,19 @@ if (document.images) {

</tr>

<tr>

<td>

- <br>

+ <br>

</td>

</tr>

</table>

-<DIV align="right">

-<table cellspacing="0" cellpadding="0" width="200">

+<div align="right">

+<table cellspacing="0" cellpadding="0" width="200" summary="">

<tr>

<td>

-<em>All PCs are compatible. But some of

-them are more compatible than others.</em>

+<em>

+All PCs are compatible. But some of

+them are more compatible than others.

+</em>

</td>

</tr>

<tr>

@@ -245,7 +249,7 @@ Unknown

</table>

</div>

<p>

-<table cellspacing="0" cellpadding="0" border="0">

+<table cellspacing="0" cellpadding="0" border="0" summary="">

<td>

@@ -266,8 +270,8 @@ mod_ssl since Stronghold 3.x).

</td>

<td>

-<DIV align="right">

-<table cellspacing="0" cellpadding="5" border="0" bgcolor="#ccccff">

+<div align="right">

+<table cellspacing="0" cellpadding="5" border="0" bgcolor="#ccccff" summary="">

<tr>

@@ -295,7 +299,7 @@ superset of the functionality of all other solutions we can easily provide

backward compatibility for most of the cases. Actually there are three

compatibility areas we currently address: configuration directives,

environment variables and custom log functions.

-<H2><a name="ToC1">Configuration Directives</a></H2>

+<h2><a name="ToC1">Configuration Directives</a></h2>

For backward compatibility to the configuration directives of other SSL

solutions we do an on-the-fly mapping: directives which have a direct

counterpart in mod_ssl are mapped silently while other directives lead to a

@@ -308,11 +312,12 @@ provide.

<p>

-<table width="600" cellspacing="0" cellpadding="1" border="0">

+<table width="600" cellspacing="0" cellpadding="1" border="0" summary="">

<caption align="bottom" id="sf">Table 1: Configuration Directive Mapping</caption>

-<table width="598" cellpadding="5" cellspacing="0" border="0">

-<tr><td valign="top" align="center" bgcolor="#ffffff"><table border="0" cellspacing="0" cellpadding="2" width="598">

+<table width="598" cellpadding="5" cellspacing="0" border="0" summary="">

+<tr><td valign="top" align="center" bgcolor="#ffffff">

+<table border="0" cellspacing="0" cellpadding="2" width="598" summary="">

<td><strong>Old Directive</strong></td>

<td><strong>mod_ssl Directive</strong></td>

@@ -366,13 +371,14 @@ provide.

<tr id="D"><td><code>SSLProxyCACertificateFile</code> <em>file</em></td><td>-</td><td>functionality not supported</td></tr>

<tr id="H"><td><code>SSLProxyVerifyDepth</code> <em>number</em></td><td>-</td><td>functionality not supported</td></tr>

<tr id="D"><td><code>SSLProxyCipherList</code> <em>spec</em></td><td>-</td><td>functionality not supported</td></tr>

-</table></td>

+</table>

+</td>

</tr></table>

</td></tr></table>

</div>

<p>

<br>

-<H2><a name="ToC2">Environment Variables</a></H2>

+<h2><a name="ToC2">Environment Variables</a></h2>

When you use ``<code>SSLOptions +CompatEnvVars</code>'' additional environment

variables are generated. They all correspond to existing official mod_ssl

variables. The currently implemented variable derivation is listed in <a

@@ -380,11 +386,12 @@ href="#table2">Table 2</a>.

<p>

-<table width="600" cellspacing="0" cellpadding="1" border="0">

+<table width="600" cellspacing="0" cellpadding="1" border="0" summary="">

<caption align="bottom" id="sf">Table 2: Environment Variable Derivation</caption>

-<table width="598" cellpadding="5" cellspacing="0" border="0">

-<tr><td valign="top" align="center" bgcolor="#ffffff"><table border="0" cellspacing="0" cellpadding="2" width="598">

+<table width="598" cellpadding="5" cellspacing="0" border="0" summary="">

+<tr><td valign="top" align="center" bgcolor="#ffffff">

+<table border="0" cellspacing="0" cellpadding="2" width="598" summary="">

<td><strong>Old Variable</strong></td>

<td><strong>mod_ssl Variable</strong></td>

@@ -455,13 +462,14 @@ href="#table2">Table 2</a>.

<tr id="D"><td><code>SSL_CLIENT_KEY_EXP</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>

<tr id="H"><td><code>SSL_CLIENT_KEY_ALGORITHM</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>

<tr id="D"><td><code>SSL_CLIENT_KEY_SIZE</code></td><td><code>-</code></td><td>Not supported by mod_ssl</td></tr>

-</table></td>

+</table>

+</td>

</tr></table>

</td></tr></table>

</div>

<p>

<br>

-<H2><a name="ToC3">Custom Log Functions</a></H2>

+<h2><a name="ToC3">Custom Log Functions</a></h2>

When mod_ssl is built into Apache or at least loaded (under DSO situation)

additional functions exist for the <a

href="../mod_log_config.html#formats">Custom Log Format</a> of <a

@@ -475,11 +483,12 @@ are listed in <a href="#table3">Table 3</a>.

<p>

-<table width="600" cellspacing="0" cellpadding="1" border="0">

+<table width="600" cellspacing="0" cellpadding="1" border="0" summary="">

<caption align="bottom" id="sf">Table 3: Custom Log Cryptography Function</caption>

-<table width="598" cellpadding="5" cellspacing="0" border="0">

-<tr><td valign="top" align="center" bgcolor="#ffffff"><table border="0" cellspacing="0" cellpadding="2" width="598">

+<table width="598" cellpadding="5" cellspacing="0" border="0" summary="">

+<tr><td valign="top" align="center" bgcolor="#ffffff">

+<table border="0" cellspacing="0" cellpadding="2" width="598" summary="">

<td><strong>Function Call</strong></td>

<td><strong>Description</strong></td>

@@ -490,60 +499,23 @@ are listed in <a href="#table3">Table 3</a>.

<tr id="H"><td><code>%...{issuerdn}c</code></td> <td>Client Certificate Issuer Distinguished Name</td></tr>

<tr id="D"><td><code>%...{errcode}c</code></td> <td>Certificate Verification Error (numerical)</td></tr>

<tr id="H"><td><code>%...{errstr}c</code></td> <td>Certificate Verification Error (string)</td></tr>

-</table></td>

+</table>

+</td>

</tr></table>

</td></tr></table>

</div>

- <p>

+ <p>

<br>

<table>

<tr>

<td>

- <table width="600" border="0">

+ <table width="600" border="0" summary="">

<tr>

-<script type="text/javascript" language="JavaScript">

-<!-- Hiding the code

-if (document.images) {

- ro_img_prev_bot_n = new Image();

- ro_img_prev_bot_n.src = "ssl_template.navbut-prev-n.gif";

- ro_img_prev_bot_o = new Image();

- ro_img_prev_bot_o.src = "ssl_template.navbut-prev-s.gif";

-// done hiding -->

-</script>

-<a href="ssl_reference.html"

- onMouseOver="ro_imgOver('ro_img_prev_bot', 'previous page'); return true"

- onMouseOut="ro_imgNormal('ro_img_prev_bot'); return true"

-><img

- name="ro_img_prev_bot"

- src="ssl_template.navbut-prev-n.gif"

- alt="previous page"

- width="70" height="18"

- border="0"

-></a><br><font color="#000000">Reference</font>

+<a href="ssl_reference.html" onmouseover="ro_imgOver('ro_img_prev_bot', 'previous page'); return true" onmouseout="ro_imgNormal('ro_img_prev_bot'); return true" onfocus="ro_imgOver('ro_img_prev_bot', 'previous page'); return true" onblur="ro_imgNormal('ro_img_prev_bot'); return true"><img name="ro_img_prev_bot" src="ssl_template.navbut-prev-n.gif" alt="previous page" width="70" height="18" border="0"></a><br><font color="#000000">Reference</font>

</td>

-<script type="text/javascript" language="JavaScript">

-<!-- Hiding the code

-if (document.images) {

- ro_img_next_bot_n = new Image();

- ro_img_next_bot_n.src = "ssl_template.navbut-next-n.gif";

- ro_img_next_bot_o = new Image();

- ro_img_next_bot_o.src = "ssl_template.navbut-next-s.gif";

-// done hiding -->

-</script>

-<a href="ssl_howto.html"

- onMouseOver="ro_imgOver('ro_img_next_bot', 'next page'); return true"

- onMouseOut="ro_imgNormal('ro_img_next_bot'); return true"

-><img

- name="ro_img_next_bot"

- src="ssl_template.navbut-next-n.gif"

- alt="next page"

- width="70" height="18"

- border="0"

-></a><br><font color="#000000">HowTo</font>

+<a href="ssl_howto.html" onmouseover="ro_imgOver('ro_img_next_bot', 'next page'); return true" onmouseout="ro_imgNormal('ro_img_next_bot'); return true" onfocus="ro_imgOver('ro_img_next_bot', 'next page'); return true" onblur="ro_imgNormal('ro_img_next_bot'); return true"><img name="ro_img_next_bot" src="ssl_template.navbut-next-n.gif" alt="next page" width="70" height="18" border="0"></a><br><font color="#000000">HowTo</font>

</td>

</tr>

</table>

@@ -553,7 +525,7 @@ if (document.images) {

</tr>

<tr>

- <td> <table width="598">

+ <td><table width="598" summary="">

<tr>

<a href="http://www.modssl.org/">mod_ssl</a> 2.6, User Manual<br>

diff --git a/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.html b/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.html
index aedc52bd62c..9ffed96cb3c 100644
--- a/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.html
+++ b/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.html

@@ -127,47 +127,17 @@ H4 {

font-style: normal;

}

--></style>

-</head>

-<body bgcolor="#ffffff" text="#000000" link="#333399" alink="#9999ff" vlink="#000066">

-<div align="center">

-<table width="600" cellspacing="0" cellpadding="0" border="0">

-<tr>

- <td>

- <img src="ssl_template.imgdot-1x1-transp.gif" alt="" width="600" height="1" align="bottom" border="0"><br>

- <table width="600" cellspacing="0" cellpadding="0">

- <tr>

- <td>

- <table width="600">

- <tr>

- <td align="left" valign="bottom">

- <font face="Arial,Helvetica" size="+2"><b>mod_ssl</b></font>

- </td>

- <td align="right">

- <img src="ssl_template.head-chapter.gif" alt="Chapter" width="175" height="94"> <img src="ssl_template.head-num-6.gif" alt="6" width="74" height="89">

- </td>

- </tr>

- </table>

- </td>

- </tr>

- <tr>

- <td><img src="ssl_template.imgdot-1x1-000000.gif" alt="" width="600" height="2" align="bottom" border="0"></td>

- </tr>

- <tr>

- <td>

- <table width="600" border="0">

- <tr>

- <td valign="top" align="left" width="250">

<!-- Hiding the code

function ro_imgNormal(imgName) {

if (document.images) {

- document[imgName].src = eval(imgName + "_n.src");

+ document[imgName].src = eval(imgName + '_n.src');

self.status = '';

}

function ro_imgOver(imgName, descript) {

if (document.images) {

- document[imgName].src = eval(imgName + "_o.src");

+ document[imgName].src = eval(imgName + '_o.src');

self.status = descript;

}

@@ -177,44 +147,76 @@ function ro_imgOver(imgName, descript) {

<!-- Hiding the code

if (document.images) {

ro_img_prev_top_n = new Image();

- ro_img_prev_top_n.src = "ssl_template.navbut-prev-n.gif";

+ ro_img_prev_top_n.src = 'ssl_template.navbut-prev-n.gif';

ro_img_prev_top_o = new Image();

- ro_img_prev_top_o.src = "ssl_template.navbut-prev-s.gif";

+ ro_img_prev_top_o.src = 'ssl_template.navbut-prev-s.gif';

+// done hiding -->

+</script>

+<script type="text/javascript" language="JavaScript">

+<!-- Hiding the code

+if (document.images) {

+ ro_img_prev_bot_n = new Image();

+ ro_img_prev_bot_n.src = 'ssl_template.navbut-prev-n.gif';

+ ro_img_prev_bot_o = new Image();

+ ro_img_prev_bot_o.src = 'ssl_template.navbut-prev-s.gif';

}

// done hiding -->

</script>

-<a href="ssl_howto.html"

- onMouseOver="ro_imgOver('ro_img_prev_top', 'previous page'); return true"

- onMouseOut="ro_imgNormal('ro_img_prev_top'); return true"

-><img

- name="ro_img_prev_top"

- src="ssl_template.navbut-prev-n.gif"

- alt="previous page"

- width="70" height="18"

- border="0"

-></a><br><font color="#000000">HowTo</font>

- </td>

- <td valign="top" align="right" width="250">

<!-- Hiding the code

if (document.images) {

ro_img_next_top_n = new Image();

- ro_img_next_top_n.src = "ssl_template.navbut-next-n.gif";

+ ro_img_next_top_n.src = 'ssl_template.navbut-next-n.gif';

ro_img_next_top_o = new Image();

- ro_img_next_top_o.src = "ssl_template.navbut-next-s.gif";

+ ro_img_next_top_o.src = 'ssl_template.navbut-next-s.gif';

+// done hiding -->

+</script>

+<script type="text/javascript" language="JavaScript">

+<!-- Hiding the code

+if (document.images) {

+ ro_img_next_bot_n = new Image();

+ ro_img_next_bot_n.src = 'ssl_template.navbut-next-n.gif';

+ ro_img_next_bot_o = new Image();

+ ro_img_next_bot_o.src = 'ssl_template.navbut-next-s.gif';

}

// done hiding -->

</script>

-<a href="ssl_glossary.html"

- onMouseOver="ro_imgOver('ro_img_next_top', 'next page'); return true"

- onMouseOut="ro_imgNormal('ro_img_next_top'); return true"

-><img

- name="ro_img_next_top"

- src="ssl_template.navbut-next-n.gif"

- alt="next page"

- width="70" height="18"

- border="0"

-></a><br><font color="#000000">Glossary</font>

+</head>

+<body bgcolor="#ffffff" text="#000000" link="#333399" alink="#9999ff" vlink="#000066">

+<div align="center">

+<table width="600" cellspacing="0" cellpadding="0" border="0" summary="">

+<tr>

+ <td>

+ <img src="ssl_template.imgdot-1x1-transp.gif" alt="" width="600" height="1" align="bottom" border="0"><br>

+ <table width="600" cellspacing="0" cellpadding="0" summary="">

+ <tr>

+ <td>

+ <table width="600" summary="">

+ <tr>

+ <td align="left" valign="bottom">

+ <font face="Arial,Helvetica" size="+2"><b>mod_ssl</b></font>

+ </td>

+ <td align="right">

+ <img src="ssl_template.head-chapter.gif" alt="Chapter" width="175" height="94"> <img src="ssl_template.head-num-6.gif" alt="6" width="74" height="89">

+ </td>

+ </tr>

+ </table>

+ </td>

+ </tr>

+ <tr>

+ <td><img src="ssl_template.imgdot-1x1-000000.gif" alt="" width="600" height="2" align="bottom" border="0"></td>

+ </tr>

+ <tr>

+ <td>

+ <table width="600" border="0" summary="">

+ <tr>

+ <td valign="top" align="left" width="250">

+<a href="ssl_howto.html" onmouseover="ro_imgOver('ro_img_prev_top', 'previous page'); return true" onmouseout="ro_imgNormal('ro_img_prev_top'); return true" onfocus="ro_imgOver('ro_img_prev_top', 'previous page'); return true" onblur="ro_imgNormal('ro_img_prev_top'); return true"><img name="ro_img_prev_top" src="ssl_template.navbut-prev-n.gif" alt="previous page" width="70" height="18" border="0"></a><br><font color="#000000">HowTo</font>

+ </td>

+ <td valign="top" align="right" width="250">

+<a href="ssl_glossary.html" onmouseover="ro_imgOver('ro_img_next_top', 'next page'); return true" onmouseout="ro_imgNormal('ro_img_next_top'); return true" onfocus="ro_imgOver('ro_img_next_top', 'next page'); return true" onblur="ro_imgNormal('ro_img_next_top'); return true"><img name="ro_img_next_top" src="ssl_template.navbut-next-n.gif" alt="next page" width="70" height="18" border="0"></a><br><font color="#000000">Glossary</font>

</td>

</tr>

</table>

@@ -222,17 +224,19 @@ if (document.images) {

</tr>

<tr>

<td>

- <br>

+ <br>

</td>

</tr>

</table>

-<DIV align="right">

-<table cellspacing="0" cellpadding="0" width="200">

+<div align="right">

+<table cellspacing="0" cellpadding="0" width="200" summary="">

<tr>

<td>

-<em>``The wise man doesn't give the right answers,

-he poses the right questions.''</em>

+<em>

+``The wise man doesn't give the right answers,

+he poses the right questions.''

+</em>

</td>

</tr>

<tr>

@@ -245,7 +249,7 @@ Claude Levi-Strauss

</table>

</div>

<p>

-<table cellspacing="0" cellpadding="0" border="0">

+<table cellspacing="0" cellpadding="0" border="0" summary="">

<td>

@@ -266,8 +270,8 @@ author.

</td>

<td>

-<DIV align="right">

-<table cellspacing="0" cellpadding="5" border="0" bgcolor="#ccccff" width="350">

+<div align="right">

+<table cellspacing="0" cellpadding="5" border="0" bgcolor="#ccccff" width="350" summary="">

<tr>

@@ -341,12 +345,14 @@ author.

</td>

</tr>

</table>

-<H2><a name="ToC1">About the module</a></H2>

+<h2><a name="ToC1">About the module</a></h2>

<ul>

<p>

- <strong id="faq">What is the history of mod_ssl?</strong>  

+ <strong id="faq">

+What is the history of mod_ssl?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#history"><b>L</b></a>]

<p>

The mod_ssl v1 package was initially created in April 1998 by <a

@@ -361,7 +367,7 @@ author.

1998. As of this writing (August 1999) the current mod_ssl version is 2.4.0.

<p>

After one year of very active development with over 1000 working hours and

- over 40 releases mod_ssl reached it's current state. The result is an

+ over 40 releases mod_ssl reached its current state. The result is an

already very clean source base implementing a very rich functionality.

The code size increased by a factor of 4 to currently a total of over

10.000 lines of ANSI C consisting of approx. 70% code and 30% code

@@ -370,28 +376,30 @@ author.

<p>

- <strong id="faq">What are the functional differences between mod_ssl and Apache-SSL, from where

-it is originally derived?</strong>  

+ <strong id="faq">

+What are the functional differences between mod_ssl and Apache-SSL, from where

+it is originally derived?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#apssl-diff"><b>L</b></a>]

<p>

- This neither can be answered in short (there were too much code changes)

- nor can be answered at all by the author (there would be immediately flame

+ This neither can be answered in short (there were too many code changes)

+ nor can be answered at all by the author (there would immediately be flame

wars with no reasonable results at the end). But as you easily can guess

- from the 5% of remaining Apache-SSL code, lot's of differences exists,

+ from the 5% of remaining Apache-SSL code, a lot of differences exists,

although user-visible backward compatibility exists for most things.

<p>

- When you really want a detailed comparison you've to read the entries in

- the large <code>CHANGES</code> file you can find in the mod_ssl

- distribution. Usually this is too much hard-core. So I recommend you to

+ When you really want a detailed comparison you have to read the entries in

+ the large <code>CHANGES</code> file that is in the mod_ssl

+ distribution. Usually this is much too hard-core. So I recommend you to

either believe in the opinion and recommendations of other users (the

simplest approach) or do a comparison yourself (the most reasonable

- approach). For this grab distributions of mod_ssl (from <a

+ approach). For the latter, grab distributions of mod_ssl (from <a

href="http://www.modssl.org/">http://www.modssl.org</a>) and Apache-SSL

(from <a href="http://www.apache-ssl.org/">http://www.apache-ssl.org</a>),

install both packages, read their documentation and try them out yourself.

Then choose the one which pleases you most.

<p>

- A few final hints to direct your comparison: quality of documentation

+ A few final hints to help direct your comparison: quality of documentation

("can you easily find answers and are they sufficient?"), quality of

source code ("is the source code reviewable so you can make sure there

aren't any trapdoors or inherent security risks because of bad programming

@@ -409,8 +417,10 @@ it is originally derived?</strong>  

<p>

- <strong id="faq">What are the major differences between mod_ssl and

-the commercial alternatives like Raven or Stronghold?</strong>  

+ <strong id="faq">

+What are the major differences between mod_ssl and

+the commercial alternatives like Raven or Stronghold?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#apssl-diff"><b>L</b></a>]

<p>

As of this writing (end of the year 1999) the major difference is

@@ -421,7 +431,7 @@ the commercial alternatives like Raven or Stronghold?</strong>  

even for US citizens the situations is at least solved next year

(September 20th, 2000) when the RSA patent expires.

<p>

- Second, there is the point that one has guarrantied support from

+ Second, there is the point that one has guaranteed support from

the commercial vendors. On the other hand, if you monitored the

Open Source quality of mod_ssl and the support activities

found on <a href="mailto:modssl-users@modssl.org">

@@ -431,7 +441,7 @@ the commercial alternatives like Raven or Stronghold?</strong>  

<p>

Third, people often think they would receive perhaps at least a

better technical SSL solution than mod_ssl from the commercial

- vendors. But this is not really the truth, because all commercial

+ vendors. But this is not really true, because all commercial

alternatives (Raven 1.4.x, Stronghold 3.x, RedHat SWS 2.x, etc.)

<i>are</i> actually based on mod_ssl and OpenSSL. The reason for

this common misunderstanding is mainly because some vendors make no

@@ -439,9 +449,9 @@ the commercial alternatives like Raven or Stronghold?</strong>  

mod_ssl based. So, do not think, just because the commercial

alternatives are usually more expensive, that you are also receiving

an alternative <i>technical</i> SSL solution. This is usually not

- the case. Actually the vendors versions of Apache, mod_ssl and OpenSSL

- often stay behind the latest free versions and this way still do not

- include perhaps important bug and security fixes. On the other hand,

+ the case. Actually the vendor versions of Apache, mod_ssl and OpenSSL

+ often stay behind the latest free versions and perhaps this way still do not

+ include important bug and security fixes. On the other hand,

it sometimes occurs that a vendor version includes useful changes

which are not available through the official freely available

packages. But most vendors play fair and contribute back those

@@ -449,7 +459,7 @@ the commercial alternatives like Raven or Stronghold?</strong>  

<p>

So, in short: There are lots of commercial versions of the popular

Apache+mod_ssl+OpenSSL server combination available. And until the

- RSA patent expires in the year 2000, US citizens have no chance,

+ RSA patent expires in the year 2000, US citizens have no choice,

of course. They have to buy one of the commercial versions. Non-US

citizens are not forced into this situation and should decide

carefully whether they really need to buy a commercial version or

@@ -458,7 +468,9 @@ the commercial alternatives like Raven or Stronghold?</strong>  

<p>

- <strong id="faq">How do I know which mod_ssl version is for which Apache version?</strong>  

+ <strong id="faq">

+How do I know which mod_ssl version is for which Apache version?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#what-version"><b>L</b></a>]

<p>

That's trivial: mod_ssl uses version strings of the syntax

@@ -471,14 +483,16 @@ the commercial alternatives like Raven or Stronghold?</strong>  

<p>

- <strong id="faq">Is mod_ssl Year 2000 compliant?</strong>  

+ <strong id="faq">

+Is mod_ssl Year 2000 compliant?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#y2k"><b>L</b></a>]

<p>

Yes, mod_ssl is Year 2000 compliant.

<p>

Because first mod_ssl internally never stores years as two digits.

Instead it always uses the ANSI C & POSIX numerical data type

- <code>time_t</code> type, which on mostly all Unix platforms at the moment

+ <code>time_t</code> type, which on almost all Unix platforms at the moment

is a <code>signed long</code> (usually 32-bits) representing seconds since

epoch of January 1st, 1970, 00:00 UTC. This signed value overflows in

early January 2038 and not in the year 2000. Second, date and time

@@ -494,7 +508,9 @@ the commercial alternatives like Raven or Stronghold?</strong>  

<p>

- <strong id="faq">What about mod_ssl and the Wassenaar Arrangement?</strong>  

+ <strong id="faq">

+What about mod_ssl and the Wassenaar Arrangement?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#wassenaar"><b>L</b></a>]

<p>

First, let us explain what <i>Wassenaar</i> and it's <i>Arrangement on

@@ -546,12 +562,14 @@ the commercial alternatives like Raven or Stronghold?</strong>  

</ul>

<p>

<br>

-<H2><a name="ToC8">About Installation</a></H2>

+<h2><a name="ToC8">About Installation</a></h2>

<ul>

<p>

- <strong id="faq">When I access my website the first time via HTTPS I get a core dump?</strong>  

+ <strong id="faq">

+When I access my website the first time via HTTPS I get a core dump?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#core-dbm"><b>L</b></a>]

<p>

There can be a lot of reasons why a core dump can occur, of course.

@@ -560,12 +578,14 @@ the commercial alternatives like Raven or Stronghold?</strong>  

broken vendor DBM libraries. To solve it either build mod_ssl with the

built-in SDBM library (specify <tt>--enable-rule=SSL_SDBM</tt> at the

APACI command line) or switch from ``<tt>SSLSessionCache dbm:</tt>'' to the

- newer ``<tt>SSLSessionCache shm:</tt>'' variant (after you've rebuilt

+ newer ``<tt>SSLSessionCache shm:</tt>'' variant (after you have rebuilt

Apache with MM, of course).

<p>

- <strong id="faq">My Apache dumps core when I add both mod_ssl and PHP3?</strong>  

+ <strong id="faq">

+My Apache dumps core when I add both mod_ssl and PHP3?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#core-php3"><b>L</b></a>]

<p>

Make sure you add mod_ssl to the Apache source tree first and then do a

@@ -576,7 +596,9 @@ the commercial alternatives like Raven or Stronghold?</strong>  

<p>

- <strong id="faq">When I startup Apache I get errors about undefined symbols like ap_global_ctx?</strong>  

+ <strong id="faq">

+When I startup Apache I get errors about undefined symbols like ap_global_ctx?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#dso-sym"><b>L</b></a>]

<p>

This actually means you installed mod_ssl as a DSO, but without rebuilding

@@ -587,7 +609,9 @@ the commercial alternatives like Raven or Stronghold?</strong>  

<p>

- <strong id="faq">When I startup Apache I get permission errors related to SSLMutex?</strong>  

+ <strong id="faq">

+When I startup Apache I get permission errors related to SSLMutex?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#mutex-perm"><b>L</b></a>]

<p>

When you receive entries like ``<code>mod_ssl: Child could not open

@@ -601,8 +625,10 @@ the commercial alternatives like Raven or Stronghold?</strong>  

<p>

- <strong id="faq">When I use the MM library and the shared memory cache each process grows

-1.5MB according to `top' although I specified 512000 as the cache size?</strong>  

+ <strong id="faq">

+When I use the MM library and the shared memory cache each process grows

+1.5MB according to `top' although I specified 512000 as the cache size?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#mm"><b>L</b></a>]

<p>

The additional 1MB are caused by the global shared memory pool EAPI

@@ -617,9 +643,11 @@ the commercial alternatives like Raven or Stronghold?</strong>  

<p>

- <strong id="faq">Apache creates files in a directory declared by the internal

+ <strong id="faq">

+Apache creates files in a directory declared by the internal

EAPI_MM_CORE_PATH define. Is there a way to override the path using a

-configuration directive?</strong>  

+configuration directive?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#mmpath"><b>L</b></a>]

<p>

No, there is not configuration directive, because for technical

@@ -630,9 +658,11 @@ configuration directive?</strong>  

<p>

- <strong id="faq">When I fire up the server, mod_ssl stops with the error

+ <strong id="faq">

+When I fire up the server, mod_ssl stops with the error

"Failed to generate temporary 512 bit RSA private key", why?

-And a "PRNG not seeded" error occurs if I try "make certificate".</strong>  

+And a "PRNG not seeded" error occurs if I try "make certificate".

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#entropy"><b>L</b></a>]

<p>

Cryptographic software needs a source of unpredictable data

@@ -654,12 +684,14 @@ And a "PRNG not seeded" error occurs if I try "make certificate".</strong> 

</ul>

<p>

<br>

-<H2><a name="ToC16">About Configuration</a></H2>

+<h2><a name="ToC16">About Configuration</a></h2>

<ul>

<p>

- <strong id="faq">Is it possible to provide HTTP and HTTPS with a single server?</strong></strong>  

+ <strong id="faq">

+Is it possible to provide HTTP and HTTPS with a single server?</strong>

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#https-parallel"><b>L</b></a>]

<p>

Yes, HTTP and HTTPS use different server ports, so there is no direct

@@ -671,7 +703,9 @@ And a "PRNG not seeded" error occurs if I try "make certificate".</strong> 

<p>

- <strong id="faq">I know that HTTP is on port 80, but where is HTTPS?</strong>  

+ <strong id="faq">

+I know that HTTP is on port 80, but where is HTTPS?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#https-port"><b>L</b></a>]

<p>

You can run HTTPS on any port, but the standards specify port 443, which

@@ -681,7 +715,9 @@ And a "PRNG not seeded" error occurs if I try "make certificate".</strong> 

<p>

- <strong id="faq">How can I speak HTTPS manually for testing purposes?</strong>  

+ <strong id="faq">

+How can I speak HTTPS manually for testing purposes?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#https-test"><b>L</b></a>]

<p>

While you usually just use

@@ -710,7 +746,9 @@ And a "PRNG not seeded" error occurs if I try "make certificate".</strong> 

<p>

- <strong id="faq">Why does the connection hang when I connect to my SSL-aware Apache server?</strong>  

+ <strong id="faq">

+Why does the connection hang when I connect to my SSL-aware Apache server?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#hang"><b>L</b></a>]

<p>

Because you connected with HTTP to the HTTPS port, i.e. you used an URL of

@@ -723,8 +761,10 @@ And a "PRNG not seeded" error occurs if I try "make certificate".</strong> 

<p>

- <strong id="faq">Why do I get ``Connection Refused'' messages when trying to access my freshly

-installed Apache+mod_ssl server via HTTPS?</strong>  

+ <strong id="faq">

+Why do I get ``Connection Refused'' messages when trying to access my freshly

+installed Apache+mod_ssl server via HTTPS?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#hang"><b>L</b></a>]

<p>

There can be various reasons. Some of the common mistakes is that people

@@ -738,8 +778,10 @@ installed Apache+mod_ssl server via HTTPS?</strong>  

<p>

- <strong id="faq">In my CGI programs and SSI scripts the various documented

-<code>SSL_XXX</code> variables do not exists. Why?</strong>  

+ <strong id="faq">

+In my CGI programs and SSI scripts the various documented

+<code>SSL_XXX</code> variables do not exists. Why?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#env-vars"><b>L</b></a>]

<p>

Just make sure you have ``<code>SSLOptions +StdEnvVars</code>''

@@ -747,7 +789,9 @@ installed Apache+mod_ssl server via HTTPS?</strong>  

<p>

- <strong id="faq">How can I use relative hyperlinks to switch between HTTP and HTTPS?</strong>  

+ <strong id="faq">

+How can I use relative hyperlinks to switch between HTTP and HTTPS?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#relative-links"><b>L</b></a>]

<p>

Usually you have to use fully-qualified hyperlinks because

@@ -766,12 +810,14 @@ installed Apache+mod_ssl server via HTTPS?</strong>  

</ul>

<p>

<br>

-<H2><a name="ToC24">About Certificates</a></H2>

+<h2><a name="ToC24">About Certificates</a></h2>

<ul>

<p>

- <strong id="faq">What are RSA Private Keys, CSRs and Certificates?</strong></strong>  

+ <strong id="faq">

+What are RSA Private Keys, CSRs and Certificates?</strong>

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#what-is"><b>L</b></a>]

<p>

The RSA private key file is a digital file that you can use to decrypt

@@ -789,7 +835,9 @@ installed Apache+mod_ssl server via HTTPS?</strong>  

<p>

- <strong id="faq">Seems like there is a difference on startup between the original Apache and an SSL-aware Apache?</strong>  

+ <strong id="faq">

+Seems like there is a difference on startup between the original Apache and an SSL-aware Apache?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#startup"><b>L</b></a>]

<p>

Yes, in general, starting Apache with a built-in mod_ssl is just like

@@ -805,7 +853,9 @@ installed Apache+mod_ssl server via HTTPS?</strong>  

<p>

- <strong id="faq">How can I create a dummy SSL server Certificate for testing purposes?</strong>  

+ <strong id="faq">

+How can I create a dummy SSL server Certificate for testing purposes?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#cert-dummy"><b>L</b></a>]

<p>

A Certificate does not have to be signed by a public CA. You can use your

@@ -827,8 +877,10 @@ installed Apache+mod_ssl server via HTTPS?</strong>  

<p>

- <strong id="faq">Ok, I've got my server installed and want to create a real SSL

-server Certificate for it. How do I do it?</strong>  

+ <strong id="faq">

+Ok, I've got my server installed and want to create a real SSL

+server Certificate for it. How do I do it?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#cert-real"><b>L</b></a>]

<p>

Here is a step-by-step description:

@@ -923,7 +975,9 @@ server Certificate for it. How do I do it?</strong>  

<p>

- <strong id="faq">How can I create and use my own Certificate Authority (CA)?</strong>  

+ <strong id="faq">

+How can I create and use my own Certificate Authority (CA)?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#cert-ownca"><b>L</b></a>]

<p>

The short answer is to use the <code>CA.sh</code> or <code>CA.pl</code>

@@ -973,7 +1027,9 @@ server Certificate for it. How do I do it?</strong>  

<p>

- <strong id="faq">How can I change the pass-phrase on my private key file?</strong>  

+ <strong id="faq">

+How can I change the pass-phrase on my private key file?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#change-passphrase"><b>L</b></a>]

<p>

You simply have to read it with the old pass-phrase and write it again

@@ -989,7 +1045,9 @@ server Certificate for it. How do I do it?</strong>  

<p>

- <strong id="faq">How can I get rid of the pass-phrase dialog at Apache startup time?</strong>  

+ <strong id="faq">

+How can I get rid of the pass-phrase dialog at Apache startup time?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#remove-passphrase"><b>L</b></a>]

<p>

The reason why this dialog pops up at startup and every re-start

@@ -1024,7 +1082,9 @@ server Certificate for it. How do I do it?</strong>  

<p>

- <strong id="faq">How do I verify that a private key matches its Certificate?</strong>  

+ <strong id="faq">

+How do I verify that a private key matches its Certificate?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#verify-key"><b>L</b></a>]

<p>

The private key contains a series of numbers. Two of those numbers form

@@ -1054,8 +1114,10 @@ server Certificate for it. How do I do it?</strong>  

<p>

- <strong id="faq">What does it mean when my connections fail with an "alert bad certificate"

-error?</strong>  

+ <strong id="faq">

+What does it mean when my connections fail with an "alert bad certificate"

+error?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#keysize1"><b>L</b></a>]

<p>

Usually when you see errors like ``<tt>OpenSSL: error:14094412: SSL

@@ -1066,7 +1128,9 @@ error?</strong>  

<p>

- <strong id="faq">Why does my 2048-bit private key not work?</strong>  

+ <strong id="faq">

+Why does my 2048-bit private key not work?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#keysize2"><b>L</b></a>]

<p>

The private key sizes for SSL must be either 512 or 1024 for compatibility

@@ -1077,8 +1141,10 @@ error?</strong>  

<p>

- <strong id="faq">Why is client authentication broken after upgrading from

-SSLeay version 0.8 to 0.9?</strong>  

+ <strong id="faq">

+Why is client authentication broken after upgrading from

+SSLeay version 0.8 to 0.9?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#hash-symlinks"><b>L</b></a>]

<p>

The CA certificates under the path you configured with

@@ -1091,7 +1157,9 @@ SSLeay version 0.8 to 0.9?</strong>  

<p>

- <strong id="faq">How can I convert a certificate from PEM to DER format?</strong>  

+ <strong id="faq">

+How can I convert a certificate from PEM to DER format?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#pem-to-der"><b>L</b></a>]

<p>

The default certificate format for SSLeay/OpenSSL is PEM, which actually

@@ -1103,8 +1171,10 @@ SSLeay version 0.8 to 0.9?</strong>  

<p>

- <strong id="faq">I try to install a Verisign certificate. Why can't I find neither the

-<code>getca</code> nor <code>getverisign</code> programs Verisign mentions?</strong>  

+ <strong id="faq">

+I try to install a Verisign certificate. Why can't I find neither the

+<code>getca</code> nor <code>getverisign</code> programs Verisign mentions?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#verisign-getca"><b>L</b></a>]

<p>

This is because Verisign has never provided specific instructions

@@ -1115,14 +1185,16 @@ SSLeay version 0.8 to 0.9?</strong>  

that file to the <code>SSLCertificateFile</code> directive.

Remember that you need to give the key file in as well (see

<code>SSLCertificateKeyFile</code> directive). For a better

- CA-related overview on SSL certifiate fiddling you can look at <a

+ CA-related overview on SSL certificate fiddling you can look at <a

href="http://www.thawte.com/certs/server/keygen/mod_ssl.html">

Thawte's mod_ssl instructions</a>.

<p>

- <strong id="faq">Can I use the Server Gated Cryptography (SGC) facility (aka Verisign Global

-ID) also with mod_ssl?</strong>  

+ <strong id="faq">

+Can I use the Server Gated Cryptography (SGC) facility (aka Verisign Global

+ID) also with mod_ssl?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#gid"><b>L</b></a>]

<p>

Yes, mod_ssl since version 2.1 supports the SGC facility. You don't have

@@ -1133,8 +1205,10 @@ ID) also with mod_ssl?</strong>  

<p>

- <strong id="faq">After I have installed my new Verisign Global ID server certificate, the

-browsers complain that they cannot verify the server certificate?</strong>  

+ <strong id="faq">

+After I have installed my new Verisign Global ID server certificate, the

+browsers complain that they cannot verify the server certificate?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#gid"><b>L</b></a>]

<p>

That is because Verisign uses an intermediate CA certificate between

@@ -1148,12 +1222,14 @@ browsers complain that they cannot verify the server certificate?</strong> 

</ul>

<p>

<br>

-<H2><a name="ToC40">About SSL Protocol</a></H2>

+<h2><a name="ToC40">About SSL Protocol</a></h2>

<ul>

<p>

- <strong id="faq">Why has my webserver a higher load now that I run SSL there?</strong>  

+ <strong id="faq">

+Why has my webserver a higher load now that I run SSL there?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#load"><b>L</b></a>]

<p>

Because SSL uses strong cryptographic encryption and this needs a lot of

@@ -1163,8 +1239,10 @@ browsers complain that they cannot verify the server certificate?</strong> 

<p>

- <strong id="faq">Often HTTPS connections to my server require up to 30 seconds for establishing

-the connection, although sometimes it works faster?</strong>  

+ <strong id="faq">

+Often HTTPS connections to my server require up to 30 seconds for establishing

+the connection, although sometimes it works faster?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#random"><b>L</b></a>]

<p>

Usually this is caused by using a <code>/dev/random</code> device for

@@ -1174,7 +1252,9 @@ the connection, although sometimes it works faster?</strong>  

<p>

- <strong id="faq">What SSL Ciphers are supported by mod_ssl?</strong>  

+ <strong id="faq">

+What SSL Ciphers are supported by mod_ssl?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#ciphers"><b>L</b></a>]

<p>

Usually just all SSL ciphers which are supported by the

@@ -1198,8 +1278,10 @@ the connection, although sometimes it works faster?</strong>  

<p>

- <strong id="faq">I want to use Anonymous Diffie-Hellman (ADH) ciphers, but I always get ``no

-shared cipher'' errors?</strong>  

+ <strong id="faq">

+I want to use Anonymous Diffie-Hellman (ADH) ciphers, but I always get ``no

+shared cipher'' errors?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#cipher-adh"><b>L</b></a>]

<p>

In order to use Anonymous Diffie-Hellman (ADH) ciphers, it is not enough

@@ -1211,8 +1293,10 @@ shared cipher'' errors?</strong>  

<p>

- <strong id="faq">I always just get a 'no shared ciphers' error if

-I try to connect to my freshly installed server?</strong>  

+ <strong id="faq">

+I always just get a 'no shared ciphers' error if

+I try to connect to my freshly installed server?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#cipher-shared"><b>L</b></a>]

<p>

Either you have messed up your <code>SSLCipherSuite</code>

@@ -1229,7 +1313,9 @@ I try to connect to my freshly installed server?</strong>  

<p>

- <strong id="faq">Why can't I use SSL with name-based/non-IP-based virtual hosts?</strong>  

+ <strong id="faq">

+Why can't I use SSL with name-based/non-IP-based virtual hosts?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#vhosts"><b>L</b></a>]

<p>

The reason is very technical. Actually it's some sort of a chicken and

@@ -1246,9 +1332,11 @@ I try to connect to my freshly installed server?</strong>  

<p>

- <strong id="faq">When I use Basic Authentication over HTTPS the lock icon in Netscape browsers

+ <strong id="faq">

+When I use Basic Authentication over HTTPS the lock icon in Netscape browsers

still show the unlocked state when the dialog pops up. Does this mean the

-username/password is still transmitted unencrypted?</strong>  

+username/password is still transmitted unencrypted?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#lock-icon"><b>L</b></a>]

<p>

No, the username/password is already transmitted encrypted. The icon in

@@ -1263,8 +1351,10 @@ username/password is still transmitted unencrypted?</strong>  

<p>

- <strong id="faq">When I connect via HTTPS to an Apache+mod_ssl+OpenSSL server with Microsoft Internet

-Explorer (MSIE) I get various I/O errors. What is the reason?</strong>  

+ <strong id="faq">

+When I connect via HTTPS to an Apache+mod_ssl+OpenSSL server with Microsoft Internet

+Explorer (MSIE) I get various I/O errors. What is the reason?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#io-ie"><b>L</b></a>]

<p>

The first reason is that the SSL implementation in some MSIE versions has

@@ -1315,9 +1405,11 @@ Explorer (MSIE) I get various I/O errors. What is the reason?</strong> &nbs

<p>

- <strong id="faq">When I connect via HTTPS to an Apache+mod_ssl server with Netscape Navigator I

+ <strong id="faq">

+When I connect via HTTPS to an Apache+mod_ssl server with Netscape Navigator I

get I/O errors and the message "Netscape has encountered bad data from the

-server" What's the reason?</strong>  

+server" What's the reason?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#io-ns"><b>L</b></a>]

<p>

The problem usually is that you had created a new server certificate with

@@ -1329,12 +1421,14 @@ server" What's the reason?</strong>  

</ul>

<p>

<br>

-<H2><a name="ToC50">About Support</a></H2>

+<h2><a name="ToC50">About Support</a></h2>

<ul>

<p>

- <strong id="faq">What information resources are available in case of mod_ssl problems?</strong>  

+ <strong id="faq">

+What information resources are available in case of mod_ssl problems?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#resources"><b>L</b></a>]

<p>

The following information resources are available.

@@ -1363,7 +1457,9 @@ In case of problems you should search here first.

<p>

- <strong id="faq">What support contacts are available in case of mod_ssl problems?</strong>  

+ <strong id="faq">

+What support contacts are available in case of mod_ssl problems?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#contact"><b>L</b></a>]

<p>

The following lists all support possibilities for mod_ssl, in order of

@@ -1397,15 +1493,17 @@ you just like most, please.

<p>

- <strong id="faq">What information and details I've to provide to

-the author when writing a bug report?</strong>  

+ <strong id="faq">

+What information and details I've to provide to

+the author when writing a bug report?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#report-details"><b>L</b></a>]

<p>

You have to at least always provide the following information:

<p>

<ul>

<li><em>Apache, mod_ssl and OpenSSL version information</em><br>

- The mod_ssl version you should really know. It's for instance the version

+ The mod_ssl version you should really know. For instance, it's the version

number in the distribution tarball. The Apache version can be determined

by running ``<code>httpd -v</code>''. The OpenSSL version can be

determined by running ``<code>openssl version</code>''. Alternatively when

@@ -1435,7 +1533,9 @@ You have to at least always provide the following information:

<p>

- <strong id="faq">I got a core dump, can you help me?</strong>  

+ <strong id="faq">

+I got a core dump, can you help me?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#core-dumped"><b>L</b></a>]

<p>

In general no, at least not unless you provide more details about the code

@@ -1446,7 +1546,9 @@ You have to at least always provide the following information:

<p>

- <strong id="faq">Ok, I got a core dump but how do I get a backtrace to find out the reason for it?</strong>  

+ <strong id="faq">

+Ok, I got a core dump but how do I get a backtrace to find out the reason for it?

+</strong>  

[<a href="http://www.modssl.org/docs/2.6/ssl_faq.html#report-backtrace"><b>L</b></a>]

<p>

Follow the following steps:

@@ -1466,7 +1568,7 @@ Follow the following steps:

done a <code>setuid()</code> (unless it does an <code>exec()</code>) for

security reasons (there can be privileged information left over in

memory). Additionally you can run ``<code>/path/to/httpd -X</code>''

- manually to force Apache not not fork.

+ manually to force Apache to not fork.

<p>

<li>Analyze the core-dump. For this run ``<code>gdb /path/to/httpd

/tmp/httpd.core</code>'' or a similar command has to run. In GDB you then

@@ -1475,56 +1577,18 @@ Follow the following steps:

this backtrace to the author.

</ol>

</ul>

- <p>

+ <p>

<br>

<table>

<tr>

<td>

- <table width="600" border="0">

+ <table width="600" border="0" summary="">

<tr>

-<script type="text/javascript" language="JavaScript">

-<!-- Hiding the code

-if (document.images) {

- ro_img_prev_bot_n = new Image();

- ro_img_prev_bot_n.src = "ssl_template.navbut-prev-n.gif";

- ro_img_prev_bot_o = new Image();

- ro_img_prev_bot_o.src = "ssl_template.navbut-prev-s.gif";

-// done hiding -->

-</script>

-<a href="ssl_howto.html"

- onMouseOver="ro_imgOver('ro_img_prev_bot', 'previous page'); return true"

- onMouseOut="ro_imgNormal('ro_img_prev_bot'); return true"

-><img

- name="ro_img_prev_bot"

- src="ssl_template.navbut-prev-n.gif"

- alt="previous page"

- width="70" height="18"

- border="0"

-></a><br><font color="#000000">HowTo</font>

+<a href="ssl_howto.html" onmouseover="ro_imgOver('ro_img_prev_bot', 'previous page'); return true" onmouseout="ro_imgNormal('ro_img_prev_bot'); return true" onfocus="ro_imgOver('ro_img_prev_bot', 'previous page'); return true" onblur="ro_imgNormal('ro_img_prev_bot'); return true"><img name="ro_img_prev_bot" src="ssl_template.navbut-prev-n.gif" alt="previous page" width="70" height="18" border="0"></a><br><font color="#000000">HowTo</font>

</td>

-<script type="text/javascript" language="JavaScript">

-<!-- Hiding the code

-if (document.images) {

- ro_img_next_bot_n = new Image();

- ro_img_next_bot_n.src = "ssl_template.navbut-next-n.gif";

- ro_img_next_bot_o = new Image();

- ro_img_next_bot_o.src = "ssl_template.navbut-next-s.gif";

-// done hiding -->

-</script>

-<a href="ssl_glossary.html"

- onMouseOver="ro_imgOver('ro_img_next_bot', 'next page'); return true"

- onMouseOut="ro_imgNormal('ro_img_next_bot'); return true"

-><img

- name="ro_img_next_bot"

- src="ssl_template.navbut-next-n.gif"

- alt="next page"

- width="70" height="18"

- border="0"

-></a><br><font color="#000000">Glossary</font>

+<a href="ssl_glossary.html" onmouseover="ro_imgOver('ro_img_next_bot', 'next page'); return true" onmouseout="ro_imgNormal('ro_img_next_bot'); return true" onfocus="ro_imgOver('ro_img_next_bot', 'next page'); return true" onblur="ro_imgNormal('ro_img_next_bot'); return true"><img name="ro_img_next_bot" src="ssl_template.navbut-next-n.gif" alt="next page" width="70" height="18" border="0"></a><br><font color="#000000">Glossary</font>

</td>

</tr>

</table>

@@ -1534,7 +1598,7 @@ if (document.images) {

</tr>

<tr>

- <td> <table width="598">

+ <td><table width="598" summary="">

<tr>

<a href="http://www.modssl.org/">mod_ssl</a> 2.6, User Manual<br>

diff --git a/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.wml b/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.wml
index 52be25e5bb9..fc2dde8156e 100644
--- a/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.wml
+++ b/usr.sbin/httpd/htdocs/manual/mod/mod_ssl/ssl_faq.wml

@@ -60,12 +60,12 @@ author.

</table>

# container tag for layouting a question

-<define-container faq>

+<define-tag faq endtag=required>

<set-var %attributes>

<p>

-<li><toc_h3 <get-var toc>></toc_h3>

+<li><toc_h3 alt="<get-var toc>"></toc_h3>

<strong id="faq">%body</strong>\

@@ -73,7 +73,7 @@ author.

<p>

-</define-container>

+</define-tag>

<h2>About the module</h2>

@@ -96,7 +96,7 @@ What is the history of mod_ssl?

1998. As of this writing (August 1999) the current mod_ssl version is 2.4.0.

<p>

After one year of very active development with over 1000 working hours and

- over 40 releases mod_ssl reached it's current state. The result is an

+ over 40 releases mod_ssl reached its current state. The result is an

already very clean source base implementing a very rich functionality.

The code size increased by a factor of 4 to currently a total of over

10.000 lines of ANSI C consisting of approx. 70% code and 30% code

@@ -108,24 +108,24 @@ What are the functional differences between mod_ssl and Apache-SSL, from where

it is originally derived?

</faq>