]> granicus.if.org Git - apache/commit
mod_ssl: add support for subjectAltName-based host name checking in proxy mode
authorKaspar Brand <kbrand@apache.org>
Wed, 26 Dec 2012 10:54:54 +0000 (10:54 +0000)
committerKaspar Brand <kbrand@apache.org>
Wed, 26 Dec 2012 10:54:54 +0000 (10:54 +0000)
commit50eb694c34a7ee1c47b0c9c5aeb44da74983f38d
tree5225e29293b009b82fc01ab7717f24dc7b5f8109
parent7e374279b5f54992de481b0a65d1165a22c3ff06
mod_ssl: add support for subjectAltName-based host name checking in proxy mode
(PR 54030)

factor out code from ssl_engine_init.c:ssl_check_public_cert()
to ssl_util_ssl.c:SSL_X509_match_name()

introduce new SSLProxyCheckPeerName directive, which should eventually
obsolete SSLProxyCheckPeerCN

ssl_engine_io.c:ssl_io_filter_handshake(): avoid code duplication
when aborting with HTTP_BAD_GATEWAY

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1425874 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
docs/log-message-tags/next-number
docs/manual/mod/mod_ssl.xml
modules/ssl/mod_ssl.c
modules/ssl/ssl_engine_config.c
modules/ssl/ssl_engine_init.c
modules/ssl/ssl_engine_io.c
modules/ssl/ssl_private.h
modules/ssl/ssl_util_ssl.c
modules/ssl/ssl_util_ssl.h