]> granicus.if.org Git - apache/commit
mod_ssl_ct: fix return values for custom extension callback
authorJacob Champion <jchampion@apache.org>
Wed, 19 Apr 2017 01:32:58 +0000 (01:32 +0000)
committerJacob Champion <jchampion@apache.org>
Wed, 19 Apr 2017 01:32:58 +0000 (01:32 +0000)
commit6f10517a08499525d0732ef9ffe47cff49ad499a
treebdbf7b0a86227756b86171212e001049d834b2f7
parent2091bb843a42ad62423b6f624a0157afed10e463
mod_ssl_ct: fix return values for custom extension callback

This is most likely a follow-up to r1628833.

At some point during the OpenSSL 1.0.2 beta, the contract for custom
extension callbacks changed from "returning -1 skips the extension" to
"returning -1 will issue a TLS fatal alert". This caused mod_ssl_ct to
abort TLS connections that it intended to ignore. Zero is the correct
return value for "do nothing" in 1.0.2.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1791845 13f79535-47bb-0310-9956-ffa450edef68
modules/ssl/mod_ssl_ct.c