Skip to content
  1. Apr 07, 2019
  3. Apr 04, 2019
  5. Apr 03, 2019
  7. Apr 02, 2019
  9. Mar 30, 2019
  11. Mar 28, 2019
  13. Mar 27, 2019
  15. Mar 26, 2019
  17. Mar 22, 2019
  19. Mar 21, 2019
  21. Mar 20, 2019
    • Joe Orton's avatar
      Merged x2. · 6102a851
      Joe Orton authored 
      
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1855919 13f79535-47bb-0310-9956-ffa450edef68
      6102a851
    • Joe Orton's avatar
      Merge r1855646, r1855748 from trunk: · 0dcd178c
      Joe Orton authored 
      mod_proxy/ssl: cleanup per-request SSL configuration for recycled proxy conns.

The SSL dir config of proxy/backend connections is stored in r->per_dir_config
but those connections have a lifetime independent of the requests they handle.

So we need to allow the external ssl_engine_set() function to reset mod_ssl's
dir config in between proxy requests, or the first sslconn->dc could be used
after free for the next requests.

mod_proxy can then reset/reinit the request config when recycling its backend
connections.

* Solve a chicken and egg problem here:
  We need to have sslconn->dc set correctly when we want to
  init sslconn, but we need to allocate memory for it first.

PR 63256.
Submitted by: ylavic, rpluem
Reviewed by: ylavic, jorton, jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1855918 13f79535-47bb-0310-9956-ffa450edef68
      0dcd178c
    • Joe Orton's avatar
      Merge r1855849 from trunk: · 84edf5f4
      Joe Orton authored 
      * modules/ssl/ssl_engine_kernel.c (ssl_hook_Access_modern): Correctly
  restore SSL verify state after PHA failure in TLSv1.3.

Submitted by: Michael Kaufmann <mail michael-kaufmann.ch>
Reviewed by: jorton, covener, jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1855917 13f79535-47bb-0310-9956-ffa450edef68
      84edf5f4
  23. Mar 19, 2019