You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by mi...@apache.org on 2025/04/03 14:39:46 UTC
svn commit: r1924758 - /httpd/httpd/patches/2.4.x/httpd-2.4-ssl-prot-fix.patch
Author: minfrin
Date: Thu Apr 3 14:39:46 2025
New Revision: 1924758
URL: http://svn.apache.org/viewvc?rev=1924758&view=rev
Log:
Add patch r1924757.
Added:
httpd/httpd/patches/2.4.x/httpd-2.4-ssl-prot-fix.patch
Added: httpd/httpd/patches/2.4.x/httpd-2.4-ssl-prot-fix.patch
URL: http://svn.apache.org/viewvc/httpd/httpd/patches/2.4.x/httpd-2.4-ssl-prot-fix.patch?rev=1924758&view=auto
==============================================================================
--- httpd/httpd/patches/2.4.x/httpd-2.4-ssl-prot-fix.patch (added)
+++ httpd/httpd/patches/2.4.x/httpd-2.4-ssl-prot-fix.patch Thu Apr 3 14:39:46 2025
@@ -0,0 +1,29 @@
+Index: changes-entries/ssl_prot.txt
+===================================================================
+--- changes-entries/ssl_prot.txt (nonexistent)
++++ changes-entries/ssl_prot.txt (working copy)
+@@ -0,0 +1,5 @@
++
++ *) mod_ssl: Remove warning over potential uninitialised value
++ for ssl protocol prior to protocol selection.
++ [Graham Leggett]
++
+Index: modules/ssl/ssl_engine_init.c
+===================================================================
+--- modules/ssl/ssl_engine_init.c (revision 1924757)
++++ modules/ssl/ssl_engine_init.c (working copy)
+@@ -618,8 +618,13 @@
+ int protocol = mctx->protocol;
+ SSLSrvConfigRec *sc = mySrvConfig(s);
+ #if OPENSSL_VERSION_NUMBER >= 0x10100000L
+- int prot;
++ /* default is highest supported version, will be overridden below */
++#if SSL_HAVE_PROTOCOL_TLSV1_3
++ int prot = TLS1_3_VERSION;
++#else
++ int prot = TLS1_2_VERSION;
+ #endif
++#endif
+
+ /*
+ * Create the new per-server SSL context