Hello, Short question: How do I use a environment variable in <IfDefine> condition in httpd.conf file? I like to use "SVN-ACTION" variable in <IfDefine> condition in order to define specific configuration for SVN requests. AFAIK, <IfDefine> can take parameters passed using -D option. Can I leverage this directive to check for a environment variable? Is there any other work around to define specific configuration depending on environment variable? Here's my server configuration: Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8e-fips-rhel5 DAV/2 mod_choke/0.1 mod_auth_mda/2.0 mod_jk/1.2.16-dev mo d_python/3.3.1 Python/2.4.4 SVN/1.6.0 mod_auth_svn/0.2 Long question: I've a typical need to use client certificates for all UI requests, but not for SVN requests. I use "SSLVerifyClient optional" at "<Location />" level and "SSLVerifyClient none" at "<Location /svn>" level. But the problem is, I face "413 Request entity too Large" if I upload large files, say 10MB. As mentioned in bug 12355 [1] if i specify "SSLVerifyClient optional" at "<VirtualHost *:443>" level, i do not face the problem, but then it prompts for client certificate even for SVN requests. I want to avoid it. I'm looking out for a way to specify "SSLVerifyClient none" at "<VirtualHost *:443>" level only for SVN requests. By default, at server level i will specify "SSLVerifyClient optional" that will be effective for all user requests and I'll also do not face 413 error. Looks like directive "SSLRenegBufferSize" is introduced in apache v2.2.12 which may solve my problem, but I can't upgrade my server at the moment for various other reasons. Bottomline, i need to define "SSLVerifyClient none" for all SVN requests either by checking for "SVN-ACTION" variable or by any other means. Any help in this regard would be highly appreciated. Thank you. [1] https://issues.apache.org/bugzilla/show_bug.cgi?id=12355 -- Regards, Bhuvaneswaran A www.livecipher.com GPG: 0x7A13E5B0 --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|