On Thu, Mar 02, 2000, Karl Denninger wrote:
> How do I restrict access on a mod_ssl server in certain directories to ONLY
> SSL encrypted sessions?
For SSL only (any ciphers allowed) use SSLRequireSSL. If you need more
fine-grained control, use either a SSLCipherSuite which contains only
strong ciphers (use "openssl ciphers -v" to find the cipher spec string)
and/or SSLRequire and check the cipher bits with it.
Ralf S. Engelschall
[EMAIL PROTECTED]
www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
