Commit 410720f8 authored by Joe Orton's avatar Joe Orton
Browse files

* modules/ssl/ssl_engine_kernel.c (ssl_hook_ReadReq): Compare SNI 

  hostname against Host header case-insensitively.

PR: 49491
Submitted by: Mayank Agrawal <magrawal.08 gmail.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1082189 13f79535-47bb-0310-9956-ffa450edef68
parent 31dd4978

CHANGES

+3 −0
Changes for CHANGES: 3 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -2,6 +2,9 @@ 


Changes with Apache 2.3.12



  *) mod_ssl: Check SNI hostname against Host header case-insensitively.

     PR 49491.  [Mayank Agrawal <magrawal.08 gmail.com>]



  *) mod_ldap: Add LDAPConnectionPoolTTL to give control over lifetime

     of bound backend LDAP connections.  PR47634 [Eric Covener]

modules/ssl/ssl_engine_kernel.c

+1 −1
Changes for modules/ssl/ssl_engine_kernel.c: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -202,7 +202,7 @@ int ssl_hook_ReadReq(request_rec *r) 
        if (rv != APR_SUCCESS || scope_id) {

            return HTTP_BAD_REQUEST;

        }

        if (strcmp(host, servername)) {

        if (strcasecmp(host, servername)) {

            ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server,

                        "Hostname %s provided via SNI and hostname %s provided"

                        " via HTTP are different", servername, host);