]> granicus.if.org Git - apache/commit
Bring SNI behavior into better conformance with RFC 6066:
authorKaspar Brand <kbrand@apache.org>
Sat, 5 Apr 2014 12:57:43 +0000 (12:57 +0000)
committerKaspar Brand <kbrand@apache.org>
Sat, 5 Apr 2014 12:57:43 +0000 (12:57 +0000)
commitcbba0dbc00fc8aebb4389bc0bdbe3e72544d6fd2
tree837de5f96f807be51e83c7eed466fc708ff5979f
parentedbbc1acda697eff7074083066d4991805ba7951
Bring SNI behavior into better conformance with RFC 6066:

- no longer send a warning-level unrecognized_name(112) alert
  when no matching vhost is found (PR 56241)

- at startup, only issue warnings about IP/port conflicts and name-based
  SSL vhosts when running with an OpenSSL without TLS extension support
  (almost 5 years after SNI was added to 2.2.x, the
  "[...] only work for clients with TLS server name indication support"
  warning feels obsolete)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1585090 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
modules/ssl/ssl_engine_init.c
modules/ssl/ssl_engine_kernel.c