httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Yann Ylavic <ylavic....@gmail.com>
Subject Re: svn commit: r1813027 - /httpd/httpd/branches/2.4.x/STATUS
Date Wed, 01 Nov 2017 20:42:36 GMT
On Wed, Nov 1, 2017 at 6:34 PM, William A Rowe Jr <wrowe@rowe-clan.net> wrote:
> You are right, thanks. With the new _ex entry points the backport looks ABI
> clean, nicely done Yann.

Thanks Bill, by taking a last look at the proposed patch, I've noticed
that v5 partially reverted r1747069, a change that you made and
backported to 2.4.21 (IIRC), but which happened later in time than
than my SSLProxy changes in trunk.
I missed that when resolving the conflict around this code in v5.

So I've just updated the proposal to v6 with this (only) change:

--- httpd-2.4.x-r1740928_and_co-v5.patch
+++ httpd-2.4.x-r1740928_and_co-v6.patch
@@ -2069,13 +2046,13 @@ Index: modules/ssl/ssl_engine_io.c
              }
          }
 -        else if ((sc->proxy_ssl_check_peer_cn == SSL_ENABLED_TRUE) &&
-+        else if ((dc->proxy->ssl_check_peer_cn != FALSE) &&
++        else if ((dc->proxy->ssl_check_peer_cn == TRUE) &&
              hostname_note) {
              const char *hostname;
              int match = 0;
_

which restores the existing (and expected) behaviour here.


Regards,
Yann.

Mime
View raw message