* modules/ssl/ssl_engine_kernel.c (ssl_hook_Fixup): Set

  an "ssl-secure-reneg" note indicating whether the client
  supports the secure renegotiation TLS extension.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906485 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/modules/ssl/ssl_engine_kernel.c b/modules/ssl/ssl_engine_kernel.c
index f61b249cfbfcad0ad0ccc407d8354a6b00fb11ee..e4757e762b45df9942c46f29b69ccf900cf3b316 100644 (file)
--- a/modules/ssl/ssl_engine_kernel.c
+++ b/modules/ssl/ssl_engine_kernel.c
@@ -1191,6 +1191,16 @@ int ssl_hook_Fixup(request_rec *r)
         }
     }
 
+
+    apr_table_setn(r->notes, "ssl-secure-reneg", 
+#ifdef SSL_get_secure_renegotiation_support
+                   SSL_get_secure_renegotiation_support(ssl)
+                   ? "1" : "0"
+#else
+                   "0"
+#endif
+        );
+
     return DECLINED;
 }