Webmaster in a Nutshell, Third Edition

Name

SSLOptions

Synopsis

                     SSLOptions [+|-]option...
                  

[server config, within <VirtualHost> or <Directory>, or .htaccess]

Controls a number of SSL runtime options. Per-directory or location merging of options is controlled by the + or - prepended to an option. A + option adds to the set of options that are in place from an higher-level specification. A - options removes an localized option that was in place from a higher-level specification. The available options are:

StdEnvVars

Creates the standard set of SSL-related environment variables. Since there are many of these and gathering this information can cause a performance hit, this configurable per directory, for example, is for CGI and SSL requests only.

CompatEnvVars

Creates a set of environment variables that enable compatibility with previous Apache SSL programs.

ExportCertData

Creates environment variables containing the encoded server and client certificate information for use with CGI.

FakeBasicAuth

Allows basic authorization to be mocked using the Subject Distinguished Name (DN) of a client certificate as a valid username. No password is requested from the user, but the user file must have the appropriately encoded string for “password” for this scheme to work.

StrictRequire

Forces strict SSL authorization (with SSLRequire or SSLRequireSSL) to be satisfied regardless of whether other authorization requirements are met when the Satisfy any directive is used. Without this option, Satisfy any overrides a forbidden access ...