httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Joe Orton <jor...@redhat.com>
Subject Re: [PATCH] mod_setenvif.c [was: ssl_ext_lookup #2]
Date Thu, 22 Sep 2005 13:27:37 GMT
On Thu, Sep 22, 2005 at 03:09:09PM +0200, Martin Kraemer wrote:
> On Thu, Sep 22, 2005 at 01:55:17PM +0100, Joe Orton wrote:
> > > So you do just want to export env vars from mod_ssl?  Why does 
> > > mod_setenvif have to come into the equation at all then?  Why not add 
> > > something like "SSLOptions +ExportCertExts" to mod_ssl and export all 
> > > the ext values in appropriately named env vars?  
> > > SSL_EXT_S_1_3_6_etc="This is a comment", just as it does for the rest of 
> > > the cert info with +ExportCertData?
> 
> Me dislikes - it should be possible to limit it to the values
> that we really want (there were problems with env size filling up
> woth experted certs)

Then "SSLExportCertExt NS_COMMENT 1.2.3.4.5" or whatever.  I can't see 
how jumping through hoops with mod_setenvif to get mod_ssl to export new 
env vars makes sense.

joe

Mime
View raw message