Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

mod_ssl: Fix reading custom DH parameters from CertificateFile with OpenSSL 3.X #447

Closed
wants to merge 1 commit into from
Closed

mod_ssl: Fix reading custom DH parameters from CertificateFile with OpenSSL 3.X #447

wants to merge 1 commit into from

Commits on May 23, 2024

  1. Fix reading custom DH parameters from CertificateFile. 

    This commit addresses an issue where Apache HTTPD with OpenSSL 3.0 or later is unable to load custom DH parameters specified in the CertificateFile configuration option.
PEM_read_bio_Parameters is unable to extract just the DH parameters and returns NULL when a CertificateFile contains signed certificates, intermediate certificates, and DH parameters all together in one file. A new approach is needed for OpenSSL 3.0.
This patch implements a solution using OpenSSL's decoding framework to selectively load only the custom DH parameters from a composite CertificateFile.

Testing confirmed custom DH params can now be properly extracted from CertificateFile as intended.
    @o8vm
    o8vm committed May 23, 2024
    Configuration menu
    Copy the full SHA
    45fbb7f View commit details
    Browse the repository at this point in the history