On Thu, Sep 22, 2005 at 03:09:09PM +0200, Martin Kraemer wrote: > On Thu, Sep 22, 2005 at 01:55:17PM +0100, Joe Orton wrote: > > > So you do just want to export env vars from mod_ssl? Why does > > > mod_setenvif have to come into the equation at all then? Why not add > > > something like "SSLOptions +ExportCertExts" to mod_ssl and export all > > > the ext values in appropriately named env vars? > > > SSL_EXT_S_1_3_6_etc="This is a comment", just as it does for the rest of > > > the cert info with +ExportCertData? > > Me dislikes - it should be possible to limit it to the values > that we really want (there were problems with env size filling up > woth experted certs)
Then "SSLExportCertExt NS_COMMENT 1.2.3.4.5" or whatever. I can't see how jumping through hoops with mod_setenvif to get mod_ssl to export new env vars makes sense. joe
