Index: openacs-4/etc/config.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/etc/config.tcl,v
diff -u -N -r1.19.2.13 -r1.19.2.14
--- openacs-4/etc/config.tcl	30 Oct 2004 20:07:48 -0000	1.19.2.13
+++ openacs-4/etc/config.tcl	5 Dec 2004 02:03:34 -0000	1.19.2.14
@@ -59,14 +59,18 @@
 ns_param   nssha1             ${bindir}/nssha1.so 
 ns_param   nscache            ${bindir}/nscache.so 
 
-#nsrewrite is not used by any standard OpenACS code
-#ns_param   nsrewrite          ${bindir}/nsrewrite.so 
+# openacs <5.x requires nsxml
+# ns_param nsxml              ${bindir}/nsxml.so
 
+
 #---------------------------------------------------------------------
 # nsopenssl will fail unless the cert files are present as specified
 # later in this file, so it's disabled by default
 #ns_param   nsopenssl          ${bindir}/nsopenssl.so
 
+# authorize-gateway package requires dqd_utils
+# ns_param   dqd_utils dqd_utils[expr {int($tcl_version)}].so
+
 # Full Text Search
 #ns_param   nsfts              ${bindir}/nsfts.so
 
@@ -80,6 +84,7 @@
 #ns_param   nsperm             ${bindir}/nsperm.so 
 #ns_param   nscgi              ${bindir}/nscgi.so 
 #ns_param   nsjava             ${bindir}/libnsjava.so
+#ns_param   nsrewrite          ${bindir}/nsrewrite.so 
 
 if { [ns_info version] >= 4 } {
     # Required for AOLserver 4.x
@@ -143,6 +148,7 @@
 ns_section ns/parameters 
 ns_param   serverlog          ${serverroot}/log/error.log 
 ns_param   home               $homedir 
+# maxkeepalive is ignored in aolserver4.x
 ns_param   maxkeepalive       0
 ns_param   logroll            on
 ns_param   maxbackup          5
@@ -368,19 +374,29 @@
     ns_param KeyFile               keyfile.pem
     #ns_param CADir                 ca-client/dir
     #ns_param CAFile                ca-client/ca-client.crt
+    # for Protocols                "ALL" = "SSLv2, SSLv3, TLSv1"
     ns_param Protocols             "SSLv3, TLSv1" 
     ns_param CipherSuite           "ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP" 
     ns_param PeerVerify            false
     ns_param PeerVerifyDepth       3
     ns_param Trace                 false
     
+    # following from bartt's openssl3 nsd4.tcl (and he should know =)
+    # http://www.mail-archive.com/aolserver@listserv.aol.com/msg07092.html
+    ns_param SessionCache true
+    ns_param SessionCacheID 1
+    ns_param SessionCacheSize 512
+    ns_param SessionCacheTimeout 300
+
+
     #ns_section "ns/server/${server}/module/nsopenssl/sslcontext/admins"
     #ns_param Role                  server
     #ns_param ModuleDir             /path/to/dir
     #ns_param CertFile              server/server.crt 
     #ns_param KeyFile               server/server.key 
     #ns_param CADir                 ca-client/dir 
     #ns_param CAFile                ca-client/ca-client.crt
+    # for Protocols                "ALL" = "SSLv2, SSLv3, TLSv1"
     #ns_param Protocols             "All"
     #ns_param CipherSuite           "ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP" 
     #ns_param PeerVerify            false
@@ -394,12 +410,20 @@
     ns_param KeyFile               keyfile.pem 
     #ns_param CADir                 ${serverroot}/etc/certs
     #ns_param CAFile                certfile.pem
+    # for Protocols                "ALL" = "SSLv2, SSLv3, TLSv1"
     ns_param Protocols             "SSLv2, SSLv3, TLSv1" 
     ns_param CipherSuite           "ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP" 
     ns_param PeerVerify            false
     ns_param PeerVerifyDepth       3
     ns_param Trace                 false
     
+    # following from bartt's openssl3 nsd4.tcl (and he should know =)
+    # http://www.mail-archive.com/aolserver@listserv.aol.com/msg07092.html
+    ns_param SessionCache true
+    ns_param SessionCacheID 1
+    ns_param SessionCacheSize 512
+    ns_param SessionCacheTimeout 300
+
     # SSL drivers. Each driver defines a port to listen on and an explitictly named
     # SSL context to associate with it. Note that you can now have multiple driver
     # connections within a single virtual server, which can be tied to different
@@ -415,7 +439,13 @@
     ns_param port                  $httpsport
     ns_param hostname              $hostname
     ns_param address               $address
-    
+    # following added per
+    # http://www.mail-archive.com/aolserver@listserv.aol.com/msg07365.html
+    # Maximum File Size for uploads:
+    ns_param   maxinput           [expr 5 * 1024 * 1024] ;# in bytes
+    # Maximum request time
+    ns_param   recvwait           [expr 5 * 60] ;# in minutes
+
     ns_section "ns/server/${server}/module/nsopenssl/ssldriver/admins"
     ns_param sslcontext            admins
     # ns_param port                  $httpsport_admins
@@ -616,5 +646,6 @@
 # read-only WebDAV options
 #ns_param options "OPTIONS COPY GET HEAD MKCOL POST PROPFIND PROPPATCH"
 
+ns_log notice "nsd.tcl: using threadsafe tcl: [info exists tcl_platform(threaded)]"
 ns_log notice "nsd.tcl: finished reading config file."