You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Christophe JAILLET <ch...@wanadoo.fr> on 2024/02/16 20:52:04 UTC
Re: svn commit: r1915740 - in /httpd/httpd/branches/2.4.x: ./ changes-entries/pr61574.txt modules/ssl/ssl_engine_init.c
Le 12/02/2024 à 09:37, jorton@apache.org a écrit :
> Author: jorton
> Date: Mon Feb 12 08:37:35 2024
> New Revision: 1915740
>
> URL: http://svn.apache.org/viewvc?rev=1915740&view=rev
> Log:
> Merge r1825120 from trunk:
>
> * modules/ssl/ssl_engine_init.c (ssl_init_PushCAList): Remove function.
> (ssl_init_ca_cert_path): Use SSL_add_file_cert_subjects_to_stack()
> instead.
>
> [Edit: This does change behaviour: the acceptable client CA list is now
> always be sent in sorted order rather than configured/file order.
> In the case of SSLCACertificatePath and SSLCADNRequestPath, the
> order will be stable rather than non-determistic as previously.]
>
> PR: 61574
> Github: closes #406
> Reviewed by: jorton, jfclere, covener
>
> Added:
> httpd/httpd/branches/2.4.x/changes-entries/pr61574.txt
> Modified:
> httpd/httpd/branches/2.4.x/ (props changed)
> httpd/httpd/branches/2.4.x/modules/ssl/ssl_engine_init.c
>
> Propchange: httpd/httpd/branches/2.4.x/
> ------------------------------------------------------------------------------
> Merged /httpd/httpd/trunk:r1825120
r1825124 was a follow-up of this patch.
Should it be backported as well?
CJ
Re: svn commit: r1915740 - in /httpd/httpd/branches/2.4.x: ./ changes-entries/pr61574.txt modules/ssl/ssl_engine_init.c
Posted by Joe Orton <jo...@redhat.com>.
On Fri, Feb 16, 2024 at 09:52:04PM +0100, Christophe JAILLET wrote:
> Le 12/02/2024 à 09:37, jorton@apache.org a écrit :
> > Author: jorton
> > Date: Mon Feb 12 08:37:35 2024
> > New Revision: 1915740
> >
> > URL: http://svn.apache.org/viewvc?rev=1915740&view=rev
> > Log:
...
> r1825124 was a follow-up of this patch.
> Should it be backported as well?
Good catch, thank you. Proposed now.
Regards, Joe