httpd-cvs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From humbed...@apache.org
Subject svn commit: r1304987 - /httpd/httpd/branches/2.4.x/docs/manual/upgrading.xml
Date Sun, 25 Mar 2012 06:57:57 GMT
Author: humbedooh
Date: Sun Mar 25 06:57:57 2012
New Revision: 1304987

URL: http://svn.apache.org/viewvc?rev=1304987&view=rev
Log:
Merge r1304985 from trunk:

Mention SSL certificate checks are now enabled by default, as opposed to disabled in 2.2.
Submitted by: Petter Berntsen (petterb@gmail.com)

Modified:
    httpd/httpd/branches/2.4.x/docs/manual/upgrading.xml

Modified: httpd/httpd/branches/2.4.x/docs/manual/upgrading.xml
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/docs/manual/upgrading.xml?rev=1304987&r1=1304986&r2=1304987&view=diff
==============================================================================
--- httpd/httpd/branches/2.4.x/docs/manual/upgrading.xml (original)
+++ httpd/httpd/branches/2.4.x/docs/manual/upgrading.xml Sun Mar 25 06:57:57 2012
@@ -301,7 +301,11 @@
       variables has changed. The old format can still be used with the new
       <code>LegacyDNStringFormat</code> argument to <directive
       module="mod_ssl">SSLOptions</directive>. The SSLv2 protocol is
-      no longer supported.</li>
+      no longer supported. <directive module="mod_ssl">SSLProxyCheckPeerCN
+	  </directive> and <directive module="mod_ssl">SSLProxyCheckPeerExpire
+	  </directive> now default to On, causing proxy requests to HTTPS hosts
+	  with bad or outdated certificates to fail with a 502 status code (Bad 
+	  gateway)</li>
 
       <li><program>htpasswd</program> now uses MD5 hash by default on
       all platforms.</li>



Mime
View raw message