]> granicus.if.org Git - apache/commit
mod_proxy/ssl: cleanup per-request SSL configuration for recycled proxy conns.
authorYann Ylavic <ylavic@apache.org>
Sat, 16 Mar 2019 13:45:17 +0000 (13:45 +0000)
committerYann Ylavic <ylavic@apache.org>
Sat, 16 Mar 2019 13:45:17 +0000 (13:45 +0000)
commitc75c9a812e8981839a4b88d639f55203c730e98c
tree545e31cff075fdfeb7680a8cc43a4abd465cb165
parentc66bef968e0c4a3a1368c7bcdb77eee5b01fa1c6
mod_proxy/ssl: cleanup per-request SSL configuration for recycled proxy conns.

The SSL dir config of proxy/backend connections is stored in r->per_dir_config
but those connections have a lifetime independent of the requests they handle.

So we need to allow the external ssl_engine_set() function to reset mod_ssl's
dir config in between proxy requests, or the first sslconn->dc could be used
after free for the next requests.

mod_proxy can then reset/reinit the request config when recycling its backend
connections.

PR 63256.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1855646 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
modules/proxy/proxy_util.c
modules/ssl/mod_ssl.c