Mailing List Archive

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #2 from Philippe Cloutier <chealer@gmail.com> ---
Thanks Lucien

I agree that the beginning now sticks to the English version. As for the main
part of the sentence though, I do not know if the change helps or hurts. I'm
afraid I still don't understand the sentence, either in English or French, so I
can't judge if the French version is correct or not. Perhaps adding an example
about that case would at least help me understand what it is about.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #3 from Lucien Gentis <lucien.gentis@univ-lorraine.fr> ---

It says that, if you wish a "normal" configuration, you have to put your
certificate and your key in two separate files, and type

SSLCertificateFile <your certificate file>
SSLCertificateKeyFile <your key file>

and that, if you put your certificate AND your key in one unique file, which is
discouraged, you have to type

SSLCertificateFile <your certificate/key file>

but after all declarations using a separate key file like the two declarations
above..

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #4 from Philippe Cloutier <chealer@gmail.com> ---
Thank you Lucien, I think I understand now.

The related paragraph for the SSLCertificateFile needs to be reviewed too, in
particular the following sentence:
En effet, les fichiers de certificats qui contiennent de tels clés embarquées
doivent être définis avant les certificats en utilisant un fichier de clé
séparé.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #5 from Lucien Gentis <lucien.gentis@univ-lorraine.fr> ---
Yes, trunk and 2.4 branches corrected.
Thanks

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #6 from Philippe Cloutier <chealer@gmail.com> ---
Thank you again Lucien, this is much better now.

The paragraph in SSLCertificateFile still contains an implication which is not
in the English version:
Enfin, il est aussi possible d'ajouter la clé privée du certificat de l'entité
finale au fichier de certificat, ce qui permet de se passer d'une directive
SSLCertificateKeyFile séparée. Cette pratique est cependant fortement
déconseillée. En effet, les fichiers de certificat qui contiennent de telles
clés embarquées doivent être définis après les certificats qui utilisent un
fichier de clé séparé.

"En effet" implies that the [main] reason why the practice is discouraged is
the lack of support for any ordering of the directives. I wonder if that is
really the case, or if the practice is discouraged for another reason.
Ultimately though, this comes from a lack of clarity in the English version.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #7 from Lucien Gentis <lucien.gentis@univ-lorraine.fr> ---
OK, as for SSLCertificateKeyFile paragraph, I replaced "En effet," by "Dans ce
cas,'

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #8 from Philippe Cloutier <chealer@gmail.com> ---
I am sorry Lucien but I am missing something about comment #7. Was
SSLCertificateKeyFile not already fine? Was it not SSLCertificateFile which
still had the implication "En effet"?

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #9 from Lucien Gentis <lucien.gentis@univ-lorraine.fr> ---
Both directives had the implication "En effet"

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #10 from Philippe Cloutier <chealer@gmail.com> ---
Yes, but should the remaining one (in SSLCertificateFile) be tracked in a
separate ticket?

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org

https://bz.apache.org/bugzilla/show_bug.cgi?id=66384

--- Comment #11 from Lucien Gentis <lucien.gentis@univ-lorraine.fr> ---
There are no more such false implications.
If you didn't see it, that's because the french doc had not already been
rebuilt.
Yet it has been.
reload mod_ssl page and you will see the changes

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org
For additional commands, e-mail: docs-help@httpd.apache.org