You are viewing a plain text version of this content. The canonical link for it is here.

Posted to cvs@httpd.apache.org by yl...@apache.org on 2017/01/05 00:35:10 UTC

svn commit: r1777392 - /httpd/httpd/branches/2.2.x/STATUS

Author: ylavic
Date: Thu Jan  5 00:35:09 2017
New Revision: 1777392

URL: http://svn.apache.org/viewvc?rev=1777392&view=rev
Log:
Propose: openssl < 1.0.2 are EOL, and SSLv3 is disabled by default on active versions.

Modified:
    httpd/httpd/branches/2.2.x/STATUS

Modified: httpd/httpd/branches/2.2.x/STATUS
URL: http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/STATUS?rev=1777392&r1=1777391&r2=1777392&view=diff
==============================================================================
--- httpd/httpd/branches/2.2.x/STATUS (original)
+++ httpd/httpd/branches/2.2.x/STATUS Thu Jan  5 00:35:09 2017
@@ -204,6 +204,14 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      2.2.x patch: http://home.apache.org/~ylavic/patches/httpd-2.2.x-fix_warnings_r1125877.patch
      +1: ylavic, wrowe
 
+  *) mod_ssl: Support compilation against libssl built with OPENSSL_NO_SSL3
+     [but without: and change the compiled-in default for SSL[Proxy]Protocol
+                   to "all -SSLv3", in accordance with RFC 7568]
+     trunk patch: https://svn.apache.org/r1703952
+     2.4.x patch: https://svn.apache.org/r1706008
+     2.2.x patch: http://home.apache.org/~ylavic/patches/httpd-2.2.x-backport_r1703952.patch
+     +1: ylavic
+
 PATCHES/ISSUES THAT ARE STALLED
 
    * mod_proxy_balancer: Always initialize the shared parameters of a load