From ade83fa2850a627d5e8114ba8ea47be4d9306fed Mon Sep 17 00:00:00 2001 From: Joe Orton Date: Wed, 3 Feb 2010 14:11:19 +0000 Subject: [PATCH] * modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl): Add SSL_SECURE_RENEG variable to indicate support for secure reneg. * modules/ssl/ssl_engine_kernel.c (ssl_hook_Fixup_vars): Export SSL_SECURE_RENEG in the default set of variable.s git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@906057 13f79535-47bb-0310-9956-ffa450edef68 --- modules/ssl/ssl_engine_kernel.c | 1 + modules/ssl/ssl_engine_vars.c | 8 ++++++++ 2 files changed, 9 insertions(+) diff --git a/modules/ssl/ssl_engine_kernel.c b/modules/ssl/ssl_engine_kernel.c index 6571cf6424..f61b249cfb 100644 --- a/modules/ssl/ssl_engine_kernel.c +++ b/modules/ssl/ssl_engine_kernel.c @@ -1080,6 +1080,7 @@ static const char *ssl_hook_Fixup_vars[] = { "SSL_VERSION_INTERFACE", "SSL_VERSION_LIBRARY", "SSL_PROTOCOL", + "SSL_SECURE_RENEG", "SSL_COMPRESS_METHOD", "SSL_CIPHER", "SSL_CIPHER_EXPORT", diff --git a/modules/ssl/ssl_engine_vars.c b/modules/ssl/ssl_engine_vars.c index f1683fa867..5a2874732a 100644 --- a/modules/ssl/ssl_engine_vars.c +++ b/modules/ssl/ssl_engine_vars.c @@ -332,6 +332,14 @@ static char *ssl_var_lookup_ssl(apr_pool_t *p, conn_rec *c, char *var) TLSEXT_NAMETYPE_host_name)); } #endif + else if (ssl != NULL && strcEQ(var, "SECURE_RENEG")) { + int flag = 0; +#ifdef SSL_get_secure_renegotiation_support + flag = SSL_get_secure_renegotiation_support(ssl); +#endif + result = apr_pstrdup(p, flag ? "true" : "false"); + } + return result; } -- 2.40.0