Return-Path: <cvs-return-58524-archive-asf-public=cust-asf.ponee.io@httpd.apache.org>
X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io
Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io
Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183])
	by cust-asf2.ponee.io (Postfix) with ESMTP id 865B2200B83
	for <archive-asf-public-internal@cust-asf2.ponee.io>; Sat, 17 Sep 2016 15:13:50 +0200 (CEST)
Received: by cust-asf.ponee.io (Postfix)
	id 8505E160ACD; Sat, 17 Sep 2016 13:13:50 +0000 (UTC)
Delivered-To: archive-asf-public@cust-asf.ponee.io
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by cust-asf.ponee.io (Postfix) with SMTP id CB31D160ABB
	for <archive-asf-public@cust-asf.ponee.io>; Sat, 17 Sep 2016 15:13:49 +0200 (CEST)
Received: (qmail 58529 invoked by uid 500); 17 Sep 2016 13:13:49 -0000
Mailing-List: contact cvs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
list-help: <mailto:cvs-help@httpd.apache.org>
list-unsubscribe: <mailto:cvs-unsubscribe@httpd.apache.org>
List-Post: <mailto:cvs@httpd.apache.org>
List-Id: <cvs.httpd.apache.org>
Delivered-To: mailing list cvs@httpd.apache.org
Received: (qmail 58520 invoked by uid 99); 17 Sep 2016 13:13:49 -0000
Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142)
    by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 17 Sep 2016 13:13:48 +0000
Received: from localhost (localhost [127.0.0.1])
	by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id A03DA1A001C
	for <cvs@httpd.apache.org>; Sat, 17 Sep 2016 13:13:48 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org
X-Spam-Flag: NO
X-Spam-Score: -0.426
X-Spam-Level: 
X-Spam-Status: No, score=-0.426 tagged_above=-999 required=6.31
	tests=[KAM_LAZY_DOMAIN_SECURITY=1, RP_MATCHES_RCVD=-1.426]
	autolearn=disabled
Received: from mx1-lw-eu.apache.org ([10.40.0.8])
	by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024)
	with ESMTP id R3-ZAsKtWQEp for <cvs@httpd.apache.org>;
	Sat, 17 Sep 2016 13:13:48 +0000 (UTC)
Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139])
	by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTP id 6FE815FAF9
	for <cvs@httpd.apache.org>; Sat, 17 Sep 2016 13:13:47 +0000 (UTC)
Received: from svn01-us-west.apache.org (svn.apache.org [10.41.0.6])
	by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id A76DCE047B
	for <cvs@httpd.apache.org>; Sat, 17 Sep 2016 13:13:46 +0000 (UTC)
Received: from svn01-us-west.apache.org (localhost [127.0.0.1])
	by svn01-us-west.apache.org (ASF Mail Server at svn01-us-west.apache.org) with ESMTP id A3E463A0248
	for <cvs@httpd.apache.org>; Sat, 17 Sep 2016 13:13:46 +0000 (UTC)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Subject: svn commit: r1761220 -
 /httpd/httpd/branches/2.4.x/docs/manual/mod/mod_ssl.html.en
Date: Sat, 17 Sep 2016 13:13:46 -0000
To: cvs@httpd.apache.org
From: covener@apache.org
X-Mailer: svnmailer-1.0.9
Message-Id: <20160917131346.A3E463A0248@svn01-us-west.apache.org>
archived-at: Sat, 17 Sep 2016 13:13:50 -0000

Author: covener
Date: Sat Sep 17 13:13:46 2016
New Revision: 1761220

URL: http://svn.apache.org/viewvc?rev=1761220&view=rev
Log:
xform


Modified:
    httpd/httpd/branches/2.4.x/docs/manual/mod/mod_ssl.html.en

Modified: httpd/httpd/branches/2.4.x/docs/manual/mod/mod_ssl.html.en
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/docs/manual/mod/mod_ssl.html.en?rev=1761220&r1=1761219&r2=1761220&view=diff
==============================================================================
--- httpd/httpd/branches/2.4.x/docs/manual/mod/mod_ssl.html.en (original)
+++ httpd/httpd/branches/2.4.x/docs/manual/mod/mod_ssl.html.en Sat Sep 17 13:13:46 2016
@@ -2658,13 +2658,9 @@ The following levels are available for <
      the client <em>has to</em> present a valid Certificate</li>
 <li><strong>optional_no_ca</strong>:
      the client may present a valid Certificate<br />
-     but it need not to be (successfully) verifiable.</li>
+     but it need not to be (successfully) verifiable. This option
+     cannot be relied upon for client authentication.  </li>
 </ul>
-<p>In practice only levels <strong>none</strong> and
-<strong>require</strong> are really interesting, because level
-<strong>optional</strong> doesn't work with all browsers and level
-<strong>optional_no_ca</strong> is actually against the idea of
-authentication (but can be used to establish SSL test pages, etc.)</p>
 <div class="example"><h3>Example</h3><pre class="prettyprint lang-config">SSLVerifyClient require</pre>
 </div>