Add a warning if protocol given in SSLProtocol or SSLProxyProtocol will override...

This could be a missing + or - prefix.

PR 52820

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1520445 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/docs/log-message-tags/next-number b/docs/log-message-tags/next-number
index 4aabc755bc163f3edc68f0d3db02861407ba94fb..96633c95e7194125f883646d84b76f7e0ccd44aa 100644 (file)
--- a/docs/log-message-tags/next-number
+++ b/docs/log-message-tags/next-number
@@ -1 +1 @@
-2532
+2533

diff --git a/modules/ssl/ssl_engine_config.c b/modules/ssl/ssl_engine_config.c
index 296752ad65c6d4fdf331f978453dda0c14c10be0..5b973c783bdf03970b500870bd59cf5c4e60fd87 100644 (file)
--- a/modules/ssl/ssl_engine_config.c
+++ b/modules/ssl/ssl_engine_config.c
@@ -1352,6 +1352,13 @@ static const char *ssl_cmd_protocol_parse(cmd_parms *parms,
             *options |= thisopt;
         }
         else {
+            if (*options != SSL_PROTOCOL_NONE)
+            {
+                ap_log_error(APLOG_MARK, APLOG_WARNING, 0, parms->server, APLOGNO(02532)
+                             "Protocol '%s' of directive '%s' overrides already set parameters. "
+                             "Check if a prefix is not missing.",
+                             w, parms->cmd->name);
+            }
             *options = thisopt;
         }
     }