On Fri, 8 Mar 2002, at 7:56pm, Kenneth E. Lussier wrote:
> Does anyone know how to configure Apache-SSL so that browsers can cache
> SSL encrypted documents?

  I'm not sure I understand your question.  Are you serving objects, and the
browser is not caching them, and you think that is Apache's doing?  Or are
you using Apache as a caching proxy, and you want *it* to cache SSL objects?

  The latter is not possible; the SSL encrypted stream is passed through to
the next system directly.

  The former depends on two things: The headers the web server sends to the
client, and what the client does on its own.  I suspect many browsers are
configured internally to not cache encrypted objects.  I know MSIE has an
option for this, for example.  Not sure about Mozilla.

  As far as the headers go, if your content is dynamically generated (as it
often is for SSL), then it depends on what the generator (CGI script, for
example) sends for headers.  If the generator does not set things explicitly,
then Apache will tell the client not to cache anything, since it was
dynamically generated.

  If you are serving a static (plain old disk file) object, ummm... I'm not
sure.  Since the docs do not say or provide an option, either Apache's
default behavior should be in place (allow caching), or the SSL module is
explicitly using cache control headers to prohibit caching.  Either way, I
suspect a journey to the source code will be required.

> I thought that it was as easy as using the CachNegotiatedDocs setting, but
> I was apparently wrong.

  I assume you tried "CacheNegotatedDocs" as well?  ;-)

-- 
Ben Scott <[EMAIL PROTECTED]>
| The opinions expressed in this message are those of the author and do not |
| necessarily represent the views or policy of any other person, entity or  |
| organization.  All information is provided without warranty of any kind.  |


*****************************************************************
To unsubscribe from this list, send mail to [EMAIL PROTECTED]
with the text 'unsubscribe gnhlug' in the message body.
*****************************************************************

Reply via email to