You are viewing a plain text version of this content. The canonical link for it is here.

Posted to bugs@httpd.apache.org by bu...@apache.org on 2010/04/15 13:16:06 UTC

DO NOT REPLY [Bug 49123] mod_proxy_ajp does not send the client's SSL chain certificates

https://issues.apache.org/bugzilla/show_bug.cgi?id=49123

--- Comment #1 from Paul Donohue <ap...@PaulSD.com> 2010-04-15 07:16:04 EDT ---
So it didn't take much testing to determine that this cannot be enabled by
default, even when used with the latest Tomcat.  A long certificate chain can
easily exceed the size of the default AJP packet buffer in Tomcat, requiring a
configuration change in Tomcat 5.5.20 or later, and simply breaking older
versions of Tomcat.  I will add an option to control this behavior and disable
it by default, and add documentation to explain the Tomcat configuration
changes needed before enabling it.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org