Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: svn commit: r1178695 -
 /httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in
Date: Tue, 04 Oct 2011 06:08:03 -0000
To: cvs@httpd.apache.org
From: kbrand@apache.org
Message-Id: <20111004060803.321252388847@eris.apache.org>

Author: kbrand
Date: Tue Oct  4 06:08:02 2011
New Revision: 1178695

URL: http://svn.apache.org/viewvc?rev=1178695&view=rev
Log:
Add SSLCARevocationCheck directive to default mod_ssl config

Modified:
    httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in

Modified: httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in?rev=1178695&r1=1178694&r2=1178695&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in (original)
+++ httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in Tue Oct  4 06:08:02 2011
@@ -132,12 +132,15 @@ SSLCertificateKeyFile "@exp_sysconfdir@/
 #   Certificate Revocation Lists (CRL):
 #   Set the CA revocation path where to find CA CRLs for client
 #   authentication or alternatively one huge file containing all
-#   of them (file must be PEM encoded)
+#   of them (file must be PEM encoded).
+#   The CRL checking mode needs to be configured explicitly
+#   through SSLCARevocationCheck (defaults to "none" otherwise).
 #   Note: Inside SSLCARevocationPath you need hash symlinks
 #         to point to the certificate files. Use the provided
 #         Makefile to update the hash symlinks after changes.
 #SSLCARevocationPath "@exp_sysconfdir@/ssl.crl"
 #SSLCARevocationFile "@exp_sysconfdir@/ssl.crl/ca-bundle.crl"
+#SSLCARevocationCheck chain
 
 #   Client Authentication (Type):
 #   Client certificate verification type and depth.  Types are