]> granicus.if.org Git - apache/commit
Correct the behavior and interaction between SSLProxyCheckPeer[CN|Name],
authorWilliam A. Rowe Jr <wrowe@apache.org>
Thu, 2 Jun 2016 22:31:35 +0000 (22:31 +0000)
committerWilliam A. Rowe Jr <wrowe@apache.org>
Thu, 2 Jun 2016 22:31:35 +0000 (22:31 +0000)
commit40581f846525497c4346f64d16c69a684115473a
treea1a198f0a112f2dde9523e0ac0d384965525eec0
parentb40a42160626c30e5f0e08a5fa0db7c9fcaeace2
Correct the behavior and interaction between SSLProxyCheckPeer[CN|Name],
such that disabling either disables both, and that enabling either will
trigger the more comprehensive SSLProxyCheckPeerName behavior.

Only a single configuration remains to enable the legacy behavior, which
is to explicitly disable SSLProxyCheckPeerName and enable SSLProxyCheckPeerCN.

Changes to the proxy config directives leads us to a different 2.4 fix...
https://github.com/wrowe/patches/blob/master/fix_proxy_check_peer-2.4.x.patch

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1746647 13f79535-47bb-0310-9956-ffa450edef68
docs/manual/mod/mod_ssl.xml
modules/ssl/ssl_engine_io.c