You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2014/10/16 12:15:11 UTC

[Bug 57100] New: "SSLProtocol ALL" is ignored for virtual hosts

https://issues.apache.org/bugzilla/show_bug.cgi?id=57100

            Bug ID: 57100
           Summary: "SSLProtocol ALL" is ignored for virtual hosts
           Product: Apache httpd-2
           Version: 2.5-HEAD
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
          Assignee: bugs@httpd.apache.org
          Reporter: mik4@gmx.ch

It is not possible to set "SSLProtocol ALL" for a virtual host. The setting is
ignored.

Example:
* global setting: SSLProtocol ALL -SSLv3
* virtual host setting: SSLProtocol ALL

The virtual host's setting is ignored and SSLv3 is disabled for the virtual
host.


The bug is in ssl_engine_config.c (modssl_ctx_cfg_merge):

===
#define cfgMerge(el,unset)  mrg->el = (add->el == (unset)) ? base->el : add->el
...
cfgMerge(protocol, SSL_PROTOCOL_ALL);
===

=> the value "SSL_PROTOCOL_ALL" is treated as "undefined" and the global
setting is used instead.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 57100] "SSLProtocol ALL" is ignored for virtual hosts

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=57100

Michael Kaufmann <ap...@michael-kaufmann.ch> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |PatchAvailable

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 57100] "SSLProtocol ALL" is ignored for virtual hosts

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=57100

--- Comment #2 from Michael Kaufmann <ap...@michael-kaufmann.ch> ---
The proposed patch has a bug, see http://svn.apache.org/r1653993 .

The real bugfix is http://svn.apache.org/r1653997 .

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 57100] "SSLProtocol ALL" is ignored for virtual hosts

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=57100

--- Comment #1 from Michael Kaufmann <ap...@michael-kaufmann.ch> ---
Created attachment 32370
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=32370&action=edit
Bugfix (for trunk, but also works for 2.4)

I have created a patch.

I hope that someone has the time to test this and commit it to trunk. Please
also propose this bugfix for backport to 2.4.x.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 57100] "SSLProtocol ALL" is ignored for virtual hosts

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=57100

nada <ap...@valgronda.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |apache_bugzilla@valgronda.c
                   |                            |om

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 57100] "SSLProtocol ALL" is ignored for virtual hosts

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=57100

Yann Ylavic <yl...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|PatchAvailable              |

--- Comment #3 from Yann Ylavic <yl...@gmail.com> ---
Thanks Michael for the follow up.
Backport to 2.4.x proposed in r1653998.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org

[Bug 57100] "SSLProtocol ALL" is ignored for virtual hosts

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=57100

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |FixedInTrunk

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org