You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by mi...@apache.org on 2025/04/03 14:36:17 UTC

svn commit: r1924757 - in /httpd/httpd/trunk: changes-entries/ssl_prot.txt modules/ssl/ssl_engine_init.c

Author: minfrin
Date: Thu Apr  3 14:36:16 2025
New Revision: 1924757

URL: http://svn.apache.org/viewvc?rev=1924757&view=rev
Log:
mod_ssl: Remove warning over potential uninitialised value
for ssl protocol prior to protocol selection.

Added:
    httpd/httpd/trunk/changes-entries/ssl_prot.txt
Modified:
    httpd/httpd/trunk/modules/ssl/ssl_engine_init.c

Added: httpd/httpd/trunk/changes-entries/ssl_prot.txt
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/changes-entries/ssl_prot.txt?rev=1924757&view=auto
==============================================================================
--- httpd/httpd/trunk/changes-entries/ssl_prot.txt (added)
+++ httpd/httpd/trunk/changes-entries/ssl_prot.txt Thu Apr  3 14:36:16 2025
@@ -0,0 +1,5 @@
+
+  *) mod_ssl: Remove warning over potential uninitialised value
+     for ssl protocol prior to protocol selection.
+     [Graham Leggett]
+

Modified: httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ssl/ssl_engine_init.c?rev=1924757&r1=1924756&r2=1924757&view=diff
==============================================================================
--- httpd/httpd/trunk/modules/ssl/ssl_engine_init.c (original)
+++ httpd/httpd/trunk/modules/ssl/ssl_engine_init.c Thu Apr  3 14:36:16 2025
@@ -664,7 +664,12 @@ static apr_status_t ssl_init_ctx_protoco
     SSLSrvConfigRec *sc = mySrvConfig(s);
 #if OPENSSL_VERSION_NUMBER >= 0x10100000L  && \
 	(!defined(LIBRESSL_VERSION_NUMBER) || LIBRESSL_VERSION_NUMBER >= 0x20800000L)
-    int prot;
+    /* default is highest supported version, will be overridden below */
+#if SSL_HAVE_PROTOCOL_TLSV1_3 
+    int prot = TLS1_3_VERSION;
+#else
+    int prot = TLS1_2_VERSION;
+#endif
 #endif
 
     /*