Author: markt
Date: Thu Apr 30 21:19:52 2015
New Revision: 1677077
URL: http://svn.apache.org/r1677077
Log:
Move trustMaxCertLength/SSLVerifyDepth to SSLHostConfig (update docs)
Modified:
tomcat/trunk/webapps/docs/config/http.xml
Modified: tomcat/trunk/webapps/docs/config/http.xml
URL:
http://svn.apache.org/viewvc/tomcat/trunk/webapps/docs/config/http.xml?rev=1677077&r1=1677076&r2=1677077&view=diff
==============================================================================
--- tomcat/trunk/webapps/docs/config/http.xml (original)
+++ tomcat/trunk/webapps/docs/config/http.xml Thu Apr 30 21:19:52 2015
@@ -1079,6 +1079,12 @@
security constraint that uses <code>CLIENT-CERT</code>
authentication.</p>
</attribute>
+ <attribute name="certificateVerificationDepth">
+ <p>The maximum number of intermediate certificates that will be allowed
+ when validating client certificates. If not specified, the default value
+ of 10 will be used.</p>
+ </attribute>
+
<attribute name="hostName" required="false">
<p>The name of the SSL Host. This should either be the fully qualified
domain name (e.g. <code>tomcat.apache.org</code>) or a wild card domain
@@ -1265,9 +1271,9 @@
</attribute>
<attribute name="trustMaxCertLength" required="false">
- <p>The maximum number of intermediate certificates that will be allowed
- when validating client certificates. If not specified, the default value
- of 5 will be used.</p>
+ <p>This is an alias for the <code>certificateVerificationDepth</code>
+ attribute of the default
+ <a href="#SSL_Support_-_SSLHostConfig">SSLHostConfig</a> element.</p>
</attribute>
<attribute name="truststoreAlgorithm" required="false">
@@ -1442,8 +1448,9 @@
</attribute>
<attribute name="SSLVerifyDepth" required="false">
- <p>Maximum verification depth for client certificates. The default is
- "10".</p>
+ <p>This is an alias for the <code>certificateVerificationDepth</code>
+ attribute of the default
+ <a href="#SSL_Support_-_SSLHostConfig">SSLHostConfig</a> element.</p>
</attribute>
<attribute name="SSLDisableSessionTickets" required="false">
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
