Configure apache commands using SSL

1. SSLCACertificatePath syntax: SSLCACertificatePath/to/CA/certificates application environment: serverconfig, virtualhost default settings: none this command is CertificateAuthority certificate file specify a directory 2. SSLCACertificatefile

1. SSLCACertificatePath
Syntax: SSLCACertificatePath/to/CA/certificates
Application Environment: server config, virtual host
Default setting: none
This command specifies a directory for the Certificate Authority Certificate file

2. SSLCACertificatefile
Syntax: SSLCACertificatefile CA_certificate_filename
Application Environment: server config, virtual host
Default setting: none
This command specifies a file containing the Certificate Authority Certificate.

3. SSLBanCipher
Syntax: SSLBanCipher Cipher
Application Environment: pre-directory config (. htaccess)
You can use this command to disable users who want to use cipher from configuring Apache.

4. SSLCacheServerPort
Syntax: SSLCacheServerPort port │ filename
Application Environment: server config, virtual host
This command configures the TCP/IP port or UNIX domain socket for the entire SSL session cache server process.

5. SSLCacheServerPort
Syntax: SSLCacheServerPath filename
Application Environment: server config, virtual host
This command sets the path for the invocation command of the SSL session cache server throughout the process. if you have used the APACI configuration script to install Apache, the cached command execution file will be saved in the sbin subdirectory of the Apache installation directory.

6. SSLCertificateFile
Syntax: SSLCertificateFile certificate_filename
Application Environment: server config, virtual host
This command specifies the certificate file name for a host on a WEB site. to provide SSL connectivity for a virtual host, you need to specify a separate certificate for the virtual host.
7. SSLCertificateKeyFile
Syntax: SSLCertificateFile certificate_key_filename
Application Environment: server config, virtual host
This command specifies a corresponding private key file for the certificate

8 SSLEnable
Syntax: SSLEnable
Application Environment: server config, virtual host
This command is used to start SSL. this command does not require any parameters.

9 SSLDisable
Syntax: SSLDisable
Application Environment: server config, virtual host
This command is used to disable SSL. this command does not require any parameters.

10 SSLFakeBasicAuth
Syntax: SSLFakeBasicAuth
Application Environment: server config, virtual host
This command mainly translates a user's X509 certificate into a user name. The user name can be used for verification.

11 SSLRequireCipher
Syntax: SSLRequireCipher
Application Environment: pre-directory config (. htaccess)
This command adds a cipher to the pre-directory list of the request password.

12 SSLogFile
Syntax: SSLogFile log_filename
Application Environment: server config, virtual host
This command writes SSL connection information to the log file.

13 SSLRequireSSL
Syntax: SSLRequireSSL
Application Environment: pre-directory config file, directory
This command can disable an unused SSL connection.

14 SSLRequiredCiphers
Syntax: SSLRequiredCiphers cipher1: cipher2 :...
Application Environment: server config, virtual host, pre-directory config (. htaccess)
This command specifies a series of passwords separated by colons

15 SSLSessionCacheTimeout
Syntax: SSLSessionCacheTimeout seconds
Application Environment: server config, virtual host
This command sets the cache expiration time for the SSL session

16 SSLVerifyDepth
Syntax: SSLVerifyDepth number
Application Environment: server config, virtual host
Because one CA certificate can be verified by another CA certificate, a CA certificate chain can be formed. you can use this command to specify how many CA certificates can be found when the server verifies the user certificate.

17 SSLVerifyClient
Syntax: SSLVerifyClient numeric-option
Application Environment: server config, virtual host
This command can be used to determine whether the server requires a user certificate. if you do not need a user certificate, set this command to 0. if you need a user certificate, set this command to 2. if you need a user certificate or not, set it to 1.