Return-Path: Delivered-To: apmail-tomcat-dev-archive@www.apache.org Received: (qmail 87954 invoked from network); 3 Mar 2010 12:20:14 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 3 Mar 2010 12:20:14 -0000 Received: (qmail 30371 invoked by uid 500); 3 Mar 2010 12:20:07 -0000 Delivered-To: apmail-tomcat-dev-archive@tomcat.apache.org Received: (qmail 30097 invoked by uid 500); 3 Mar 2010 12:20:07 -0000 Mailing-List: contact dev-help@tomcat.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: "Tomcat Developers List" Delivered-To: mailing list dev@tomcat.apache.org Received: (qmail 30088 invoked by uid 99); 3 Mar 2010 12:20:06 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 03 Mar 2010 12:20:06 +0000 X-ASF-Spam-Status: No, hits=0.2 required=10.0 tests=RCVD_IN_DNSWL_LOW,SPF_NEUTRAL X-Spam-Check-By: apache.org Received-SPF: neutral (nike.apache.org: local policy) Received: from [213.191.128.81] (HELO mxout2.iskon.hr) (213.191.128.81) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 03 Mar 2010 12:19:57 +0000 Received: from mxscanout.iskon.hr (localhost [127.0.0.1]) by localhost (Postfix) with SMTP id 69D3A2C8042 for ; Wed, 3 Mar 2010 13:19:36 +0100 (CET) Received: from mx.iskon.hr (unknown [213.191.142.122]) by mxscanout.iskon.hr (Postfix) with SMTP id 29D222C7FBD for ; Wed, 3 Mar 2010 13:19:35 +0100 (CET) Received: (qmail 25933 invoked from network); 3 Mar 2010 13:19:35 +0100 X-AVScan: ClamAV X-Remote-IP: 89.164.108.134 Received: from 89-164-108-134.dsl.iskon.hr (HELO fc12x32m0.jboss.hr) (89.164.108.134) by mx.iskon.hr with SMTP; 3 Mar 2010 13:19:35 +0100 Message-ID: <4B8E53CD.8060301@apache.org> Date: Wed, 03 Mar 2010 13:19:25 +0100 From: Mladen Turk User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.8) Gecko/20100301 Fedora/3.0.3-1.fc12 Lightning/1.0b1 Thunderbird/3.0.3 MIME-Version: 1.0 To: Tomcat Developers List Subject: Re: svn commit: r917921 - in /tomcat/native/branches/1.1.x: java/org/apache/tomcat/jni/SSL.java native/include/ssl_private.h native/src/ssl.c native/src/sslcontext.c xdocs/miscellaneous/changelog.xml References: <20100302085147.19FF72388A39@eris.apache.org> <4B8D402D.1080007@gmail.com> <4B8D411B.20406@apache.org> <4B8D43AD.9040602@gmail.com> In-Reply-To: <4B8D43AD.9040602@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Scanned-By: IskonProtect X-PerlMX-Spam: Gauge=IIIIIIII, Probability=8%, Report=' SUPERLONG_LINE 0.05, BODY_SIZE_1000_LESS 0, BODY_SIZE_2000_LESS 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, BODY_SIZE_900_999 0, __BOUNCE_CHALLENGE_SUBJ 0, __BOUNCE_NDR_SUBJ_EXEMPT 0, __CP_URI_IN_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __FRAUD_MONEY 0, __FRAUD_MONEY_VALUE 0, __HAS_MSGID 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __MOZILLA_MSGID 0, __SANE_MSGID 0, __TO_MALFORMED_2 0, __URI_NS , __USER_AGENT 0' X-Virus-Checked: Checked by ClamAV on apache.org On 03/02/2010 05:58 PM, jean-frederic clere wrote: > On 03/02/2010 05:47 PM, Mladen Turk wrote: >> On 03/02/2010 05:43 PM, jean-frederic clere wrote: >>> On 03/02/2010 09:51 AM, mturk@apache.org wrote: >>>> Author: mturk >>>> Date: Tue Mar 2 08:51:46 2010 >>>> New Revision: 917921 >>>> >>>> URL: http://svn.apache.org/viewvc?rev=917921&view=rev >>>> Log: >>>> Add unafe legacy renegotiation support >>> >>> How does that interacts with >>> http://svn.apache.org/viewvc?rev=881179&view=rev ? >>> >> >> The same way as in mod_ssl > > Yes but won't it be possible to allow client initiated renegotiation > with 0.9.8m? Huh, seems that 0.9.8m behaves exactly like 0.9.8l If used and s_client enters R, it simply stays there until socket timeout. I simply doesn't mater which client is used 0.9.8m or legacy one, and weather the SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION is set or not. I'll check httpd 2.2.15 to see if it behaves the same. Regards -- ^TM --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org For additional commands, e-mail: dev-help@tomcat.apache.org