From: Jim Jagielski <jim@apache.org>
Date: Wed, 12 Mar 2014 16:04:52 +0000 (+0000)
Subject: Propose fix for ssl crash...
X-Git-Tag: 2.4.9~17
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=481dc02f8f59b2a4c93c646e45445f68ef1cab6e;p=apache

Propose fix for ssl crash...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1576798 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 733fad1a1b..80b1ece5f0 100644
--- a/STATUS
+++ b/STATUS
@@ -95,6 +95,12 @@ CURRENT RELEASE NOTES:
 
 RELEASE SHOWSTOPPERS:
 
+   * mod_ssl: A bug in some older versions of OpenSSL will cause a crash
+              in SSL_get_certificate for servers where the certificate hasn't
+              been sent.
+     trunk patch: http://svn.apache.org/r1576741
+     2.4.x patch: trunk works
+     +1:
 
 PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
   [ start all new proposals below, under PATCHES PROPOSED. ]
@@ -196,6 +202,7 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      trunk patch: http://svn.apache.org/r1576233
      2.4.x patch: trunk works
 
+
 OTHER PROPOSALS
 
    * A list of further possible backports can be found at: