From 7e60138c3231203a7f61130982560b7db6ec892c Mon Sep 17 00:00:00 2001
From: Karen Arutyunov <karen@codesynthesis.com>
Date: Tue, 6 Jun 2017 19:01:55 +0300
Subject: Add support for openssl-envvar module option

---
 etc/brep-module.conf | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

(limited to 'etc')

diff --git a/etc/brep-module.conf b/etc/brep-module.conf
index 6499d4b..dd8f048 100644
--- a/etc/brep-module.conf
+++ b/etc/brep-module.conf
@@ -172,6 +172,27 @@ menu About=?about
 # openssl-option
 
 
+# Environment variable to be set (<name>=<value>) or unset (just <name>) for
+# the openssl program (see openssl for details). Repeat this option to specify
+# multiple openssl variables. Note that unspecified variables are inherited
+# from the web server process.
+#
+# You need to at least set the RANDFILE environment variable to change the
+# default location of the openssl program seed file and maybe also the
+# OPENSSL_CONF variable if you would like to use a custom openssl configuration
+# file.
+#
+# openssl-envvar RANDFILE=/home/brep/www-data-openssl.rnd
+# openssl-envvar OPENSSL_CONF=/home/brep/www-data-openssl.cnf
+#
+# To create www-data-openssl.rnd with suitable permissions, run (as user brep):
+#
+# $ touch www-data-openssl.rnd
+# $ sudo chgrp www-data www-data-openssl.rnd
+# $ chmod g+rw www-data-openssl.rnd
+#
+
+
 # Trace verbosity. Disabled by default.
 #
 # verbosity 0
-- 
cgit v1.1