On 26.09.2013 23:59, Trevor Perrin wrote:
> It doesn't work with filenames relative to the Apache root. The patch
> I submitted uses ssl_engine_config.c:ssl_cmd_check_file() to map
> relative to absolute filenames. I'm not sure how you'd do that with
> SSLOpenSSLConfCmd?
It could probably be handled in
ssl_engine_config.c:ssl_cmd_SSLOpenSSLConfCmd(), but this would again
mean adding specific code for ServerInfoFile. I think a simple "Define"
directive which sets a global variable also does the trick, i.e.
something like:
Define SR /path/to/server/root/
SSLOpenSSLConfCmd ServerInfoFile ${SR}relative/file/name
> (For context: the ServerInfo file is replacing the 5878/authz file, as
> it's more useful to be able to provide ServerHello extensions, instead
> of 5878 extensions. I think 5878 is somewhat falling out of favor -
> or at least I hope so... [1]).
So do I, yes.
Kaspar
