From: Yann Ylavic <ylavic@apache.org>
Date: Tue, 29 Sep 2015 10:17:39 +0000 (+0000)
Subject: Vote for OPENSSL_NO_SSL3 (including default), looks acceptable on dev@.
X-Git-Tag: 2.4.17~64
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=e97dfc1a55ef1517baf7bc6efca7d321a8e141a6;p=apache

Vote for OPENSSL_NO_SSL3 (including default), looks acceptable on dev@.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1705831 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 5c96ae3875..b989df3b11 100644
--- a/STATUS
+++ b/STATUS
@@ -232,10 +232,7 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      PR 58349, PR 57120.
      trunk patch: https://svn.apache.org/r1703952
      2.4.x patch: https://people.apache.org/~kbrand/mod_ssl-2.4.x-disable-sslv3.diff
-     +1: kbrand
-     ylavic: Should we really change the (implicit) default in 2.4.x at
-             this stage (and potentially break existing configuratios w/o
-             SSLProtocol which used to work with SSLv3 only capable clients)?
+     +1: kbrand, ylavic
 
   *) mod_alias: Introduce expression parser support for Alias, ScriptAlias
      and Redirect. Limit Redirect expressions to directory (Location) context