[Bug 65247] New: mod_ssl: Authorization providers for use with Require

[bu...@apache.org]

https://bz.apache.org/bugzilla/show_bug.cgi?id=65247

            Bug ID: 65247
           Summary: mod_ssl: Authorization providers for use with Require
           Product: Apache httpd-2
           Version: 2.4.39
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Documentation
          Assignee: docs@httpd.apache.org
          Reporter: calestyo@scientia.net
  Target Milestone: ---

There are some issues with en/mod/mod_ssl.html's "Authorization providers for
use with Require" section:

1) "mod_ssl provides a few authentication providers for use with
mod_authz_core's Require directive."
=> this should probably read authorisation - not authentication.


2) "This is similar to the SSLRequireSSL directive."
=> it should probably tell what's the difference between this and Require ssl
... cause otherwise people cannot make a proper choice on what to use.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

[Bug 65247] mod_ssl: Authorization providers for use with Require

[bu...@apache.org]

https://bz.apache.org/bugzilla/show_bug.cgi?id=65247

--- Comment #1 from Christoph Anton Mitterer <ca...@scientia.net> ---
Also:

3) Require ssl-verify-client
"The ssl provider allows access if the user is authenticated with a valid
client certificate."

This should likely read:

"The SSL-VERIFY-CLIENT provider ONLY allows access if the user is authenticated
with a valid client certificate."

It should perhaps also be mentioned, whether Require ssl-verify-client implies
Require ssl (which it likely does)



Gosh... the documentation is really in such an bad overall state... :-(

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

[Bug 65247] mod_ssl: Authorization providers for use with Require

[bu...@apache.org]

https://bz.apache.org/bugzilla/show_bug.cgi?id=65247

Rich Bowen <rb...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from Rich Bowen <rb...@apache.org> ---
Fixed three issues in the authorization providers section:

- "authentication providers" → "authorization providers"
- Explained how Require ssl differs from SSLRequireSSL (can be
  combined with other Require directives in RequireAny/RequireAll)
- Fixed provider name from "ssl" to "ssl-verify-client"

Patched in r1933647 (trunk), r1933648 (2.4).

Christoph — thank you for the detailed reports. If you're interested
in discussing further documentation improvements, please consider
subscribing to docs@httpd.apache.org — that's where the docs team
coordinates this work, and your input would be welcome there.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org