Mention SSL certificate checks are now enabled by default, as opposed to disabled in 2.2.
Submitted by: Petter Berntsen (petterb@gmail.com)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@
1304987 13f79535-47bb-0310-9956-
ffa450edef68
variables has changed. The old format can still be used with the new
<code>LegacyDNStringFormat</code> argument to <directive
module="mod_ssl">SSLOptions</directive>. The SSLv2 protocol is
- no longer supported.</li>
+ no longer supported. <directive module="mod_ssl">SSLProxyCheckPeerCN
+ </directive> and <directive module="mod_ssl">SSLProxyCheckPeerExpire
+ </directive> now default to On, causing proxy requests to HTTPS hosts
+ with bad or outdated certificates to fail with a 502 status code (Bad
+ gateway)</li>
<li><program>htpasswd</program> now uses MD5 hash by default on
all platforms.</li>