Changeset 743e31f in mod_gnutls
- Timestamp:
- Jun 20, 2016, 2:51:01 PM (7 years ago)
- Branches:
- asyncio, debian/master, debian/stretch-backports, main, master, proxy-ticket, upstream
- Children:
- fc124e9
- Parents:
- e9ef72c
- git-author:
- Thomas Klute <thomas2.klute@…> (06/20/16 13:46:02)
- git-committer:
- Thomas Klute <thomas2.klute@…> (06/20/16 14:51:01)
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
doc/mod_gnutls_manual.mdwn
re9ef72c r743e31f 68 68 ------------- 69 69 70 Configure SSLSession Cache70 Configure TLS Session Cache 71 71 72 72 GnuTLSCache [dbm|gdbm|memcache|none] [PATH|SERVERLIST|-] … … 75 75 Context: server config 76 76 77 This directive configures the SSLSession Cache for `mod_gnutls`.77 This directive configures the TLS Session Cache for `mod_gnutls`. 78 78 This could be shared between machines of different architectures. If a 79 79 DBM cache is used, access is serialized using the `gnutls-cache` … … 81 81 82 82 `dbm` (Requires Berkeley DBM) 83 : Uses the default Berkeley DB backend of APR DBM to cache SSL83 : Uses the default Berkeley DB backend of APR DBM to cache TLS 84 84 Sessions results. The argument is a relative or absolute path to 85 85 be used as the DBM Cache file. This is compatible with most … … 88 88 89 89 `gdbm` 90 : Uses the GDBM backend of APR DBM to cache SSLSessions results.90 : Uses the GDBM backend of APR DBM to cache TLS Sessions results. 91 91 92 92 The argument is a relative or absolute path to be used as the DBM Cache … … 94 94 95 95 `memcache` 96 : Uses a memcached server to cache the SSLSession.96 : Uses a memcached server to cache the TLS Session. 97 97 98 98 The argument is a space separated list of servers. If no port … … 101 101 102 102 `none` 103 : Turns off all caching of SSLSessions.103 : Turns off all caching of TLS Sessions. 104 104 105 105 This can significantly reduce the performance of `mod_gnutls` since … … 111 111 -------------------- 112 112 113 Timeout for SSLSession Cache expiration113 Timeout for TLS Session Cache expiration 114 114 115 115 GnuTLSCacheTimeout SECONDS … … 118 118 Context: server config 119 119 120 Sets the timeout for SSLSession Cache entries expiration. This120 Sets the timeout for TLS Session Cache entries expiration. This 121 121 directive is valid even if Session Tickets are used, and indicates the 122 122 expiration time of the ticket in seconds. … … 227 227 Context: server config, virtual host, directory, .htaccess 228 228 229 This directive controls the use of SSLClient Certificate229 This directive controls the use of TLS Client Certificate 230 230 Authentication. If used in the .htaccess context, it can force TLS 231 231 re-negotiation. 232 232 233 233 `ignore` 234 : `mod_gnutls` will ignore the contents of any SSLClient Certificates234 : `mod_gnutls` will ignore the contents of any TLS Client Certificates 235 235 sent. It will not request that the client sends a certificate. 236 236 … … 622 622 ====================== 623 623 624 Simple Standard SSLExample624 Simple Standard TLS Example 625 625 --------------------------- 626 626 627 The following is an example of standard SSLHosting, using one IP627 The following is an example of standard TLS Hosting, using one IP 628 628 Addresses for each virtual host 629 629 … … 632 632 GnuTLSCache gdbm /var/cache/www-tls-cache 633 633 GnuTLSCacheTimeout 500 634 # With normal SSLWebsites, you need one IP Address per-site.634 # With normal TLS Websites, you need one IP Address per-site. 635 635 Listen 1.2.3.1:443 636 636 Listen 1.2.3.2:443 … … 682 682 683 683 `mod_gnutls` can also use "Server Name Indication", as specified in 684 RFC 3546. This allows hosting many SSLWebsites, with a Single IP684 RFC 3546. This allows hosting many TLS Websites, with a Single IP 685 685 Address. Currently all the recent browsers support this 686 686 standard. Here is an example, using SNI: ` ` … … 689 689 # Load the module into Apache. 690 690 LoadModule gnutls_module modules/mod_gnutls.so 691 # With normal SSLWebsites, you need one IP Address per-site.691 # With normal TLS Websites, you need one IP Address per-site. 692 692 Listen 1.2.3.1:443 693 693 # This could also be 'Listen *:443', … … 744 744 # Load the module into Apache. 745 745 LoadModule gnutls_module modules/mod_gnutls.so 746 # Using 4 memcache servers to distribute the SSLSession Cache.746 # Using 4 memcache servers to distribute the TLS Session Cache. 747 747 GnuTLSCache memcache "mc1.example.com mc2.example.com mc3.example.com mc4.example.com" 748 748 GnuTLSCacheTimeout 600
Note: See TracChangeset
for help on using the changeset viewer.