Brad,
is this the same functionality as 'SSLEngine upgrade' for the _nw_ module?
If so, why not reuse the same semantic?
SSLEngine on negotation crypt - dismiss non-crypt requests
SSLEngine upgradebegin uncrypted - allow upgrade
SSLEngine off begin, and stay, uncrypted
Basically because the same semantics don't fit for mod_nw_ssl.
mod_nw_ssl is a much simpler module than mod_ssl. It really only has
one significant directive which is SecureListen . All
the NWSSLUpgradeable directive is doing is associating a certificate
name with an existing listen so that