[Bug 66474] mod_ssl SSLCertificate[Key]File Directives description unclear regarding combined public/private files
| Newsgroups | gmane.comp.apache.documentation |
|---|---|
| Message-ID | <[email protected]/bugzilla/> |
https://bz.apache.org/bugzilla/show_bug.cgi?id=66474 Rich Bowen <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEEDINFO |RESOLVED --- Comment #2 from Rich Bowen <[email protected]> --- Patched in r1933923 (trunk) and r1933924 (2.4). Further research into why combining key and certificate in one file is discouraged led to a more detailed explanation — the original text just said "highly discouraged" without explaining why. The new warning block in SSLCertificateFile documents the three reasons: security (file permission separation), an ordering constraint in mod_ssl's certificate loading, and general maintainability. SSLCertificateKeyFile now cross-references the full explanation rather than repeating the same opaque sentence. -- You are receiving this mail because: You are the assignee for the bug.