You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by jo...@apache.org on 2018/02/19 16:52:28 UTC
svn commit: r1824780 - in /httpd/httpd/trunk/docs/manual:
howto/encrypt.html.en mod/mod_md.html.en mod/mod_ssl.html.en
mod/mod_ssl.xml.es mod/mod_ssl.xml.fr mod/mod_ssl.xml.meta
Author: jorton
Date: Mon Feb 19 16:52:28 2018
New Revision: 1824780
URL: http://svn.apache.org/viewvc?rev=1824780&view=rev
Log:
Transforms.
Modified:
httpd/httpd/trunk/docs/manual/howto/encrypt.html.en
httpd/httpd/trunk/docs/manual/mod/mod_md.html.en
httpd/httpd/trunk/docs/manual/mod/mod_ssl.html.en
httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.es
httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.fr
httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.meta
Modified: httpd/httpd/trunk/docs/manual/howto/encrypt.html.en
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/howto/encrypt.html.en?rev=1824780&r1=1824779&r2=1824780&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/howto/encrypt.html.en (original)
+++ httpd/httpd/trunk/docs/manual/howto/encrypt.html.en Mon Feb 19 16:52:28 2018
@@ -163,7 +163,7 @@
Internet."
</p>
<p>
- They not offer free certificates, they also developed a interface that can be used by
+ They not only offer free certificates, they also developed an interface that can be used by
your Apache httpd to get one. This is where <a href="../mod/mod_md.html">mod_md</a>
comes in.
</p>
Modified: httpd/httpd/trunk/docs/manual/mod/mod_md.html.en
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_md.html.en?rev=1824780&r1=1824779&r2=1824780&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_md.html.en (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_md.html.en Mon Feb 19 16:52:28 2018
@@ -34,7 +34,7 @@
<tr><th><a href="module-dict.html#Status">Status:</a></th><td>Extension</td></tr>
<tr><th><a href="module-dict.html#ModuleIdentifier">Module Identifier:</a></th><td>md_module</td></tr>
<tr><th><a href="module-dict.html#SourceFile">Source File:</a></th><td>mod_md.c</td></tr>
-<tr><th><a href="module-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.5.0 and later</td></tr></table>
+<tr><th><a href="module-dict.html#Compatibility">Compatibility:</a></th><td>Available in version 2.4.30 and later</td></tr></table>
<h3>Summary</h3>
<p>
@@ -63,7 +63,7 @@
DocumentRoot htdocs/a
SSLEngine on
- # no certificates specification needed!
+ # no certificates specification
</VirtualHost></pre>
<p>
@@ -80,6 +80,30 @@
</p>
</div>
+ <div class="note"><h3>Prerequisites</h3>
+ <p>
+ This module requires <code class="module"><a href="../mod/mod_watchdog.html">mod_watchdog</a></code> to be loaded as well.
+ </p><p>
+ Certificate signup and renewal with Let's Encrypt requires your server to be
+ reachable on port 80 (http:) from the outside. The alternative method over
+ port 443 (https:) is currently disabled for security reasons (status from
+ 2018-01-14).
+ </p><p>
+ The module will select from the methods offered by Let's Encrypt. If LE decides
+ at one point in the future, to re-enable it again, <code class="module"><a href="../mod/mod_md.html">mod_md</a></code> will
+ use it when suitable.
+ </p><p>
+ But for now, only the port 80 variant is available (termed "http-01"). Only
+ when LE can reach your server on port 80 will <code class="module"><a href="../mod/mod_md.html">mod_md</a></code> work for
+ you. For now, at least.
+ </p><p>
+ If you do not want to offer any sites on port 80 any more, you may leave it open
+ and redirect all requests to your https: sites instead. Use the
+ <code class="directive"><a href="#mdrequirehttps">MDRequireHttps</a></code> described below to do
+ that in a convenient fashion. This will continue to answer http: challenges
+ from Let's Encrypt.
+ </p>
+ </div>
</div>
<div id="quickview"><h3 class="directives">Directives</h3>
<ul id="toc">
Modified: httpd/httpd/trunk/docs/manual/mod/mod_ssl.html.en
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_ssl.html.en?rev=1824780&r1=1824779&r2=1824780&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_ssl.html.en (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_ssl.html.en Mon Feb 19 16:52:28 2018
@@ -2033,10 +2033,11 @@ or additionally to <code>SSLProxyMachine
This directive sets the directory where you keep the certificates and
keys used for authentication of the proxy server to remote servers.
</p>
-<p>The files in this directory must be PEM-encoded and are accessed through
-hash filenames. Additionally, you must create symbolic links named
-<code><em>hash-value</em>.N</code>. And you should always make sure this
-directory contains the appropriate symbolic links.</p>
+<p>
+mod_ssl will attempt to load every file inside the specified
+directory, but will ignore any sub-directories. Each file should
+contain a PEM-encoded certificate and matching private key.
+</p>
<div class="warning">
<p>Currently there is no support for encrypted private keys</p>
</div>
Modified: httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.es
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.es?rev=1824780&r1=1824779&r2=1824780&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.es [utf-8] (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.es [utf-8] Mon Feb 19 16:52:28 2018
@@ -1,7 +1,7 @@
<?xml version="1.0"?>
<!DOCTYPE modulesynopsis SYSTEM "../style/modulesynopsis.dtd">
<?xml-stylesheet type="text/xsl" href="../style/manual.es.xsl"?>
-<!-- English Revision: 1817381:1824247 (outdated) -->
+<!-- English Revision: 1817381:1824779 (outdated) -->
<!-- Spanish Translation: Daniel Ferradal <df...@apache.org> -->
<!--
Modified: httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.fr
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.fr?rev=1824780&r1=1824779&r2=1824780&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.fr [utf-8] (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.fr [utf-8] Mon Feb 19 16:52:28 2018
@@ -1,7 +1,7 @@
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE modulesynopsis SYSTEM "../style/modulesynopsis.dtd">
<?xml-stylesheet type="text/xsl" href="../style/manual.fr.xsl"?>
-<!-- English Revision: 1824247 -->
+<!-- English Revision: 1824247:1824779 (outdated) -->
<!-- French translation : Lucien GENTIS -->
<!-- Reviewed by : Vincent Deffontaines -->
Modified: httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.meta
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.meta?rev=1824780&r1=1824779&r2=1824780&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.meta (original)
+++ httpd/httpd/trunk/docs/manual/mod/mod_ssl.xml.meta Mon Feb 19 16:52:28 2018
@@ -9,6 +9,6 @@
<variants>
<variant>en</variant>
<variant outdated="yes">es</variant>
- <variant>fr</variant>
+ <variant outdated="yes">fr</variant>
</variants>
</metafile>