You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2012/04/20 18:41:36 UTC

DO NOT REPLY [Bug 53114] New: Apache 2.2 / OpenSSL 1.0.1 and SSLProtocol

https://issues.apache.org/bugzilla/show_bug.cgi?id=53114

             Bug #: 53114
           Summary: Apache 2.2 / OpenSSL 1.0.1 and SSLProtocol
           Product: Apache httpd-2
           Version: 2.2.22
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: peter@pramberger.at
    Classification: Unclassified


I was a bit surprised when "openssl s_client" showed me a protocol version of
TLSv1.2 when connecting to my freshly compiled Apache instance using OpenSSL
1.0.1. Somehow after reading the changelog of 2.4 it was my impression that
there were additional server changes necessary...

Anyway, I don't know if a backport of the new OpenSSL features from 2.4 to 2.2
is planned or already in the pipe - if not, attached is a patch to control the
new protocol version, as it is currently not possible to disable them if
required.

Note that just the parts relevant for the config parser were taken from 2.4, no
further functionality was backported.

Please check.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 53114] Apache 2.2 / OpenSSL 1.0.1 and SSLProtocol

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53114

Peter Pramberger <pe...@pramberger.at> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |PatchAvailable

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

DO NOT REPLY [Bug 53114] Apache 2.2 / OpenSSL 1.0.1 and SSLProtocol

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53114

--- Comment #1 from Peter Pramberger <pe...@pramberger.at> 2012-04-20 16:42:09 UTC ---
Created attachment 28649
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=28649
Patch

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 53114] Apache 2.2 / OpenSSL 1.0.1 and SSLProtocol

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53114

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from Eric Covener <co...@gmail.com> ---
Sorry this did not receive any attention, similar code is now in 2.2.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org