]> granicus.if.org Git - apache/commit
Correct the behavior and interaction between SSLProxyCheckPeer[CN|Name],
authorWilliam A. Rowe Jr <wrowe@apache.org>
Thu, 2 Jun 2016 22:29:32 +0000 (22:29 +0000)
committerWilliam A. Rowe Jr <wrowe@apache.org>
Thu, 2 Jun 2016 22:29:32 +0000 (22:29 +0000)
commitb47e50890b9771f3dbc885aeebc4dfc8c869ddd1
treef59c5c85ff388c9a00718ffb37d6ec1fab2e9f27
parent58b67cf1c4732b8572ac476164265da307f5a3f5
Correct the behavior and interaction between SSLProxyCheckPeer[CN|Name],
such that disabling either disables both, and that enabling either will
trigger the more comprehensive SSLProxyCheckPeerName behavior.

Only a single configuration remains to enable the legacy behavior, which
is to explicitly disable SSLProxyCheckPeerName and enable SSLProxyCheckPeerCN.

Major refactoring leads us to an alternate implementation for 2.4.21;
https://github.com/wrowe/patches/blob/master/fix_proxy_check_peer-2.4.x.patch

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1746645 13f79535-47bb-0310-9956-ffa450edef68
docs/manual/mod/mod_ssl.xml
modules/ssl/ssl_engine_io.c