Skip to content
  1. Mar 20, 2019
    • Joe Orton's avatar
      Merge r1855646, r1855748 from trunk: · 0dcd178c
      Joe Orton authored
      mod_proxy/ssl: cleanup per-request SSL configuration for recycled proxy conns.
      
      The SSL dir config of proxy/backend connections is stored in r->per_dir_config
      but those connections have a lifetime independent of the requests they handle.
      
      So we need to allow the external ssl_engine_set() function to reset mod_ssl's
      dir config in between proxy requests, or the first sslconn->dc could be used
      after free for the next requests.
      
      mod_proxy can then reset/reinit the request config when recycling its backend
      connections.
      
      * Solve a chicken and egg problem here:
        We need to have sslconn->dc set correctly when we want to
        init sslconn, but we need to allocate memory for it first.
      
      PR 63256.
      Submitted by: ylavic, rpluem
      Reviewed by: ylavic, jorton, jim
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1855918 13f79535-47bb-0310-9956-ffa450edef68
      0dcd178c
    • Joe Orton's avatar
      Merge r1855849 from trunk: · 84edf5f4
      Joe Orton authored
      * modules/ssl/ssl_engine_kernel.c (ssl_hook_Access_modern): Correctly
        restore SSL verify state after PHA failure in TLSv1.3.
      
      Submitted by: Michael Kaufmann <mail michael-kaufmann.ch>
      Reviewed by: jorton, covener, jim
      
      
      git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1855917 13f79535-47bb-0310-9956-ffa450edef68
      84edf5f4
  2. Mar 19, 2019
  3. Mar 18, 2019
  4. Mar 17, 2019
  5. Mar 16, 2019
  6. Mar 15, 2019
  7. Mar 14, 2019
  8. Mar 13, 2019