Oracle HTTP Server B12255-01 Administrator's Manual page 152

Security Services Implemented Within Oracle HTTP Server
Category
Valid Values (for
SSLOptions
continued)
Syntax
Default
Context
8-22 Oracle HTTP Server Administrator's Guide
Value
StrictRequire: Denies access when, according to
I
or
SSLRequireSSL
forbidden. Without StrictRequire, it is possible for a
'Satisfy any' directive setting to override the SSLRequire
or SSLRequireSSL directive, allowing access if the client
passes the host restriction or supplies a valid user name and
password.
Thus, the combination of SSLRequireSSL or SSLRequire
with SSLOptions +StrictRequire gives mod_ossl the
ability to override a 'Satisfy any' directive in all cases.
CompatEnvVars: Exports obsolete environment variables for
I
backward compatibility to Apache SSL 1.x, mod_ssl 2.0.x,
Sioux 1.0, and Stronghold 2.x. Use this to provide compatibility
to existing CGI scripts.
OptRenegotiate: This enables optimized SSL connection
I
renegotiation handling when SSL directives are used in a
per-directory context.
SSLOptions [+-] option
None
server configuration, virtual host, directory
directives, access should be
SSLRequire