From 1edb733ae3648e37b9ab7c6af1a11b33622b5bf9 Mon Sep 17 00:00:00 2001
From: Daniel Gruno <humbedooh@apache.org>
Date: Sun, 25 Mar 2012 06:57:57 +0000
Subject: [PATCH] Merge r1304985 from trunk:

Mention SSL certificate checks are now enabled by default, as opposed to disabled in 2.2.
Submitted by: Petter Berntsen (petterb@gmail.com)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1304987 13f79535-47bb-0310-9956-ffa450edef68
---
 docs/manual/upgrading.xml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/docs/manual/upgrading.xml b/docs/manual/upgrading.xml
index 05be3dd9ba..63211528c3 100644
--- a/docs/manual/upgrading.xml
+++ b/docs/manual/upgrading.xml
@@ -301,7 +301,11 @@
       variables has changed. The old format can still be used with the new
       <code>LegacyDNStringFormat</code> argument to <directive
       module="mod_ssl">SSLOptions</directive>. The SSLv2 protocol is
-      no longer supported.</li>
+      no longer supported. <directive module="mod_ssl">SSLProxyCheckPeerCN
+	  </directive> and <directive module="mod_ssl">SSLProxyCheckPeerExpire
+	  </directive> now default to On, causing proxy requests to HTTPS hosts
+	  with bad or outdated certificates to fail with a 502 status code (Bad 
+	  gateway)</li>
 
       <li><program>htpasswd</program> now uses MD5 hash by default on
       all platforms.</li>
-- 
2.40.0