lhns / docker-httpd

docker-httpd

docker-httpd's Issues

Change default value of SSLCARevocationCheck to chain for better security?

In your configuration file, I notice that you do not change the default value of SSLCARevocationCheck, which is none and disable the certificate revocation list (CRL) checking.

The Http server official document recommends to set SSLCARevocationCheck to chain, for better security. "When set to chain (recommended setting), CRL checks are applied to all certificates in the chain".

I wonder if there is any security concern if SSLCARevocationCheck is set to none. Thanks.

Change the value of AuthnCacheContext?

Thanks for providing the container! I have a question about one httpd config:AuthnCacheContext.
It seems the official document recommends to change the default directory, which is conservative and not optimal. A better policy is to name the AuthnCacheContext for the password provider: for example a htpasswd file or database table.

Maybe it's better to set that to specify a context string for use in the cache keyin the comfig file? Thanks.