You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by yl...@apache.org on 2016/03/15 20:13:36 UTC
svn commit: r1735159 - /httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c
Author: ylavic
Date: Tue Mar 15 19:13:36 2016
New Revision: 1735159
URL: http://svn.apache.org/viewvc?rev=1735159&view=rev
Log:
mod_ssl: follow up to r1734561.
Use the right crl_check_flags in ssl_callback_SSLVerify(), can be either
a client or proxy connection here.
Modified:
httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c
Modified: httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c?rev=1735159&r1=1735158&r2=1735159&view=diff
==============================================================================
--- httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c (original)
+++ httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c Tue Mar 15 19:13:36 2016
@@ -1635,7 +1635,7 @@ int ssl_callback_SSLVerify(int ok, X509_
}
if (!ok && errnum == X509_V_ERR_UNABLE_TO_GET_CRL
- && (sc->server->crl_check_flags & MODSSL_CCF_NO_CRL_FOR_CERT_OK)) {
+ && (mctx->crl_check_flags & MODSSL_CCF_NO_CRL_FOR_CERT_OK)) {
errnum = X509_V_OK;
ok = TRUE;
}