You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@subversion.apache.org by gs...@apache.org on 2012/02/02 03:47:39 UTC

svn commit: r1239448 - /subversion/branches/1.7.x/STATUS

Author: gstein
Date: Thu Feb  2 02:47:39 2012
New Revision: 1239448

URL: http://svn.apache.org/viewvc?rev=1239448&view=rev
Log:
* STATUS: properly separate the two semantic groups of DAV changes

Modified:
    subversion/branches/1.7.x/STATUS

Modified: subversion/branches/1.7.x/STATUS
URL: http://svn.apache.org/viewvc/subversion/branches/1.7.x/STATUS?rev=1239448&r1=1239447&r2=1239448&view=diff
==============================================================================
--- subversion/branches/1.7.x/STATUS (original)
+++ subversion/branches/1.7.x/STATUS Thu Feb  2 02:47:39 2012
@@ -77,19 +77,25 @@ Candidate changes:
      +1: cmpilato (r1221780 only)
      +1: philip, rhuijben
 
- * r1232413, r1236099
-   Improve server certificate error collection code.
-   Notes:
-     r1232413 updates serf.
-     r1236099 updates neon.
-     The changes are independent, but as it changes how the config file
-     behaves, I think both should be applied at the same time. (rhuijben)
-     r1236099 is the neon equivalent of the serf change r1235831 but the
-     serf change is not nominated. (philip)
-     Needs branch as r1236099 gives a merge conflict. (philip)
+ * r1232413
+   Improve server certificate error collection code in libsvn_ra_serf.
+   Justification:
+     Problems in the certificate chain are not properly surfaced, which
+     could potentially allow for MitM attacks.
    Votes:
      +1: rhuijben, gstein
 
+ * r1235831, r1236099
+   Tweak the parsing of the ssl-authority-files config option to make it
+   easier for users to configure.
+   Justification:
+     Low impact change to help users.
+   Notes:
+     philip reports a merge conflict of r1236099, so a branch is needed
+   Votes:
+     +1: gstein
+     +1: rhuijben (r1236099 only)
+
  * r1236173
    Do canonicalization rather than requring canonical data in some
    mod_dav_svn requests.