150 Sun Crypto Accelerator 4000 Board Installation and User’s Guide • May 2003
Options are listed and described in TABLEB-7.
15. SSLRequireSSL
Context: Directory,.htaccess
This directive forbids access in a given directory unless HTTPS is used. Use the
directive to guard against misconfigurations that might otherwise leave a
directory's contents available to unauthenticated and unencrypted accesses.
TABLEB-7 AvailableSSL Options
Options Description
StdEnvVars Standardset of SSL-related CGI/SSI environment variables are
created—thereis a performance penalty for this.
ExportCertData Causes the SSL_SERVER_CERT,SSL_CLIENT_CERTand
SSL_CLIENT_CERT_CHAINn(n= 0, 1, ...) environmentvariables to
be exported. These variables contain PEM-encoded certificatesfor
the client and server.
FakeBasicAuth Distinguished Name (DN) of the client certificateis translated into
an HTTP Basic Authentication Username, and is “faked” to have
authentication. This allows the use of standardApache access
controlmechanisms with SSL client authentication without
promptingthe user for a password.
Entries for these users in the Apache passwordfiles must use the
encrypted passwordxxj31ZMTZzkVA, which is just an encrypted
form (crypt(3c)) of the word“password.”
StrictRequire Forcesa forbidden access due to SSLRequireSSL to be denied,
even in the presenceof other directives, such as Satisfy Any,
which might override this.