Permalink
Browse files

modssl: reset client-verify state when renegotiation is aborted

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1750779 13f79535-47bb-0310-9956-ffa450edef68
  • Loading branch information...
Stefan Eissing
Stefan Eissing committed Jun 30, 2016
1 parent a8777b2 commit 2d0e4eff04ea963128a41faaef21f987272e05a2
Showing with 4 additions and 0 deletions.
  1. +3 −0 CHANGES
  2. +1 −0 modules/ssl/ssl_engine_kernel.c
View
@@ -1,6 +1,9 @@
-*- coding: utf-8 -*-
Changes with Apache 2.5.0
*) mod_ssl: reset client-verify state of ssl when aborting renegotiations.
[Erki Aring <erki@example.ee>, Stefan Eissing]
*) mod_proxy_{http,ajp,fcgi}: don't reuse backend connections with data
available before the request is sent. PR 57832. [Yann Ylavic]
@@ -727,6 +727,7 @@ int ssl_hook_Access(request_rec *r)
* on this connection.
*/
apr_table_setn(r->notes, "ssl-renegotiate-forbidden", "verify-client");
SSL_set_verify(ssl, verify_old, ssl_callback_SSLVerify);
return HTTP_FORBIDDEN;
}
/* optimization */

0 comments on commit 2d0e4ef

Please sign in to comment.