PathCheck Stage
Chapter
3
Predefined SAFs and the Request Handling Process
73
The function returns
REQ_NOACTION
if SSL is not enabled, or if the
secret-keysize
parameter is not specified. If the secret keysize for the current session is less than
the specified
secret-keysize
and the
bong-file
parameter is not specified, the
function returns
REQ_ABORTED
with a status of
PROTOCOL_FORBIDDEN
. If the bong
file is specified, the function returns
REQ_PROCEED
, and the
path
variable is set to
the bong filename. Also, when a keysize restriction is not met, the SSL session
cache entry for the current session is invalidated, so that a full SSL handshake will
occur the next time the same client connects to the server.
Requests that use
ssl-check
are not cacheable in the accelerator file cache if
ssl-check
returns something other than
REQ_NOACTION
.
Parameters
ssl-logout
Applicable in
PathCheck
-class directives.
ssl-logout
invalidates the current SSL session in the server’s SSL session cache.
This does not affect the current request, but the next time the client connects, a new
SSL session will be created. If SSL is enabled, this function returns
REQ_PROCEED
after invalidating the session cache entry. If SSL is not enabled, it returns
REQ_NOACTION
.
Parameters
unix-uri-clean
Applicable in
PathCheck
-class directives.
UNIX Only.
The
unix-uri-clean
function denies access to any resource whose
physical path contains
/./
,
/../
or
//
(these are potential security problems).
secret-keysize
(optional) is the minimum number of bits required in the
secret key.
bong-file
(optional) is the name of a file (not a URI) to be served if the
restriction is not met
bucket
optional, common to all
obj.conf
functions
bucket
optional, common to all
obj.conf
functions
Summary of Contents for ENTERPRISE SERVER 6.0
Page 1: ...NSAPI Programmer s Guide Netscape Enterprise Server Version6 0 November 2001...
Page 134: ...CGI to NSAPI Conversion 134 Netscape Enterprise Server NSAPI Programmer s Guide November 2001...
Page 306: ...cinfo 306 Netscape Enterprise Server NSAPI Programmer s Guide November 2001...
Page 312: ...Sample MIME Types File 312 Netscape Enterprise Server NSAPI Programmer s Guide November 2001...
Page 324: ...Buffered Streams 324 Netscape Enterprise Server NSAPI Programmer s Guide November 2001...
Page 332: ...332 Netscape Enterprise Server NSAPI Programmer s Guide November 2001...
Page 340: ...340 Netscape Enterprise Server NSAPI Programmer s Guide November 2001...
Page 346: ...346 Netscape Enterprise Server NSAPI Programmer s Guide November 2001...
Page 352: ...352 Netscape Enterprise Server NSAPI Programmer s Guide November 2001...