Apache Reference: mod_ssl, SSLOptions

SSLOptions

Configure SSL Engine Runtime Options
Syntax: SSLOptions [+|-]option [...]
Example: SSLOptions +FakeBasicAuth -CompatEnvVars
Since: Apache 1.3

This directive controls various runtime options on a per-directory basis. Normally, if multiple SSLOptions could apply to a directory, then the most specific one is taken completely; that is,the options are not merged. If all options on the SSLOptions directive are preceded by a plus (``+'') or minus (``-'') symbol, however, then they are merged. Any options preceded by a ``+'' are added to the options currently in force, and any options preceded by a ``-'' are removed from the options currently in force.

The options argument may have several values. ``CompatEnvVars'' exports additional SSI/CGI environment variables for backward- compatibility reasons. ``ExportCertData'' exports the client and server certificates in PEM format to the SSI/CGI environment. ``FakeBasicAuth'' enables the translation of the Subject Distinguished Name (DN) of the client X.509 certificate into a HTTP Basic Authorization user name. ``StrictRequire'' forces forbidden access when SSLRequire==SSL or SSL==Require successfully decides that access should be forbidden even when a ``Satisfy any'' option is active.