tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 48192] Allow to specify the SSLSocket class in connector tag of server.xml
Date Thu, 19 Nov 2009 21:37:29 GMT
https://issues.apache.org/bugzilla/show_bug.cgi?id=48192

Mark Thomas <markt@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |WONTFIX

--- Comment #2 from Mark Thomas <markt@apache.org> 2009-11-19 13:37:27 GMT ---
Assuming this enhancement request is solely to address CVE-2009-3555, then I am
closing this as WONTFIX as this is not the solution that will be implemented.

Current thinking is that the solution to CVE-2009-3555 will be based on the
solution proposed in bug48236 combined logging based on the original patch ie
r881774.

If there are other reasons for wanting this enhancement, feel free to re-open
this issue. Enhancement requests with patches are more likely to be applied
sooner.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message