httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 54656] SNI and SSLProxyCheckPeerCN based on "connection" instead of "request" hostname
Date Wed, 22 May 2013 06:47:44 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=54656

EugeneL <eugenel@amazon.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO

--- Comment #2 from EugeneL <eugenel@amazon.com> ---
Discussions on dev@httpd.apache.org last month suggests that backend webservers
behind reverse proxies should be obeying HTTP standards by always returning
certs that has a CN equal to the Host: header.

A next action should be to correct the ProxyPreserveHost documentation to warn
users against this new default behavior in 2.4

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message