Re: LimitRequestBody 0

Joe Orton <[email protected]> Fri, 6 Jun 2008 08:40:44 +0100

Newsgroups	gmane.comp.apache.mod-ssl.user
Organization	Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SL4 1TE, United Kingdom. Registered in UK and Wales under Company Registration No. 03798903 Directors: Michael Cunningham (USA), Brendan Lane (Ireland), Matt Parson (USA), Charlie Peters (USA)
Message-ID	<[email protected]>

On Thu, Jun 05, 2008 at 10:47:25AM -0600, Keith Hellman wrote:
> This sounds a lot like 
>   https://issues.apache.org/bugzilla/show_bug.cgi?id=42625
>   https://issues.apache.org/bugzilla/show_bug.cgi?id=12355
> 
> But I think it is different.  I'm using certificates for authentication
> to all of my pages:
> 
> <Location "/">
> 	# applied to _all_ URLs
> 	SSLRequireSSL
> 
> 	SSLVerifyClient      require

You should put all this inside the VirtualHost config for the SSL 
vhost(s) in question.  That way you avoid having to do a per-location 
renegotiation and the request body buffering which is necessary in that 
case.

joe
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]