You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2012/03/04 17:31:19 UTC

DO NOT REPLY [Bug 52821] New: adapt behaviour of SSLProtocol to that of other options directives (or clarify documentation)

https://issues.apache.org/bugzilla/show_bug.cgi?id=52821

             Bug #: 52821
           Summary: adapt behaviour of SSLProtocol to that of other
                    options directives (or clarify documentation)
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: calestyo@scientia.net
    Classification: Unclassified


Hi.

As noted in bug #52703 comment #10, the parsing of SSLProtocol is different
from similar directives like (Options or SSLOptions).

In the later two, the +/- are only used to control the merging between several
_directives_ (not their parameters), e.g. like this:

Example A:
Options foo bar
Options baz
=> yields in baz

Example B:
Options foo bar
Options +baz
=> yields in foo bar baz

Example C:
Options foo bar
=> yields in foo bar


But for SSLProtocol, this seems to be different:
SSLProtocol foo bar
=> yields JUST in bar


I guess most users will see the "+/-" in the documentation and believe in good
faith, that the behaviour is the same.

So could this either be adapted (IMHO the preferred solution, thus the report
against mod_ssl) or at least be clarified in the documentation.

Thanks,
Chris.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 52821] adapt behaviour of SSLProtocol/SSLProxyProtocol to that of other options directives (or clarify documentation)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=52821

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE

--- Comment #3 from Eric Covener <co...@gmail.com> 2012-03-04 19:01:07 UTC ---


*** This bug has been marked as a duplicate of bug 52820 ***

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 52821] adapt behaviour of SSLProtocol/SSLProxyProtocol to that of other options directives (or clarify documentation)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=52821

Christoph Anton Mitterer <ca...@scientia.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|adapt behaviour of          |adapt behaviour of
                   |SSLProtocol to that of      |SSLProtocol/SSLProxyProtoco
                   |other options directives    |l to that of other options
                   |(or clarify documentation)  |directives (or clarify
                   |                            |documentation)

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 52821] adapt behaviour of SSLProtocol to that of other options directives (or clarify documentation)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=52821

--- Comment #1 from Christoph Anton Mitterer <ca...@scientia.net> 2012-03-04 16:48:48 UTC ---
Oh, and obviously the same applies to SSLProxyProtocol.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 52821] adapt behaviour of SSLProtocol/SSLProxyProtocol to that of other options directives (or clarify documentation)

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=52821

--- Comment #2 from Christoph Anton Mitterer <ca...@scientia.net> 2012-03-04 16:53:20 UTC ---
And one more thing:

If you decide to just change the documentation, then please clarify also the
effect of the following:

SSLProtocol foo
SSLProtocol bar
=> This yields likely in just "bar"

but what about:
SSLProtocol foo
SSLProtocol +bar
=> Is this just "bar" or "foo bar"?

If the later, one should probably document how a cut can be made, i.e. with
SSLProtocol foo +bar
(no + in front of foo, but bar)

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org