You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by ic...@apache.org on 2018/09/03 09:06:35 UTC

svn commit: r1839920 - /httpd/httpd/trunk/modules/ssl/ssl_private.h

Author: icing
Date: Mon Sep  3 09:06:35 2018
New Revision: 1839920

URL: http://svn.apache.org/viewvc?rev=1839920&view=rev
Log:
On the trunk:

SSL protocl TLSv1.3 no longer part of 'all' when configured. Needs to be added explicitly.
When using 'modern' as SSL policy, TLSv1.3 is enabled.


Modified:
    httpd/httpd/trunk/modules/ssl/ssl_private.h

Modified: httpd/httpd/trunk/modules/ssl/ssl_private.h
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ssl/ssl_private.h?rev=1839920&r1=1839919&r2=1839920&view=diff
==============================================================================
--- httpd/httpd/trunk/modules/ssl/ssl_private.h (original)
+++ httpd/httpd/trunk/modules/ssl/ssl_private.h Mon Sep  3 09:06:35 2018
@@ -361,13 +361,11 @@ typedef int ssl_opt_t;
 
 #ifdef SSL_OP_NO_TLSv1_3
 #define SSL_HAVE_PROTOCOL_TLSV1_3   (1)
-#define SSL_PROTOCOL_ALL   (SSL_PROTOCOL_BASIC| \
-                            SSL_PROTOCOL_TLSV1_1|SSL_PROTOCOL_TLSV1_2|SSL_PROTOCOL_TLSV1_3)
 #else
 #define SSL_HAVE_PROTOCOL_TLSV1_3   (0)
+#endif
 #define SSL_PROTOCOL_ALL   (SSL_PROTOCOL_BASIC| \
                             SSL_PROTOCOL_TLSV1_1|SSL_PROTOCOL_TLSV1_2)
-#endif
 #else
 #define SSL_PROTOCOL_ALL   (SSL_PROTOCOL_BASIC)
 #endif



Re: svn commit: r1839920 - /httpd/httpd/trunk/modules/ssl/ssl_private.h

Posted by Stefan Eissing <st...@greenbytes.de>.
Just wrote a mail. My intention is to have a version that is suitable for back porting.

> Am 03.09.2018 um 11:16 schrieb Ruediger Pluem <rp...@apache.org>:
> 
> 
> 
> On 09/03/2018 11:06 AM, icing@apache.org wrote:
>> Author: icing
>> Date: Mon Sep  3 09:06:35 2018
>> New Revision: 1839920
>> 
>> URL: http://svn.apache.org/viewvc?rev=1839920&view=rev
>> Log:
>> On the trunk:
>> 
>> SSL protocl TLSv1.3 no longer part of 'all' when configured. Needs to be added explicitly.
>> When using 'modern' as SSL policy, TLSv1.3 is enabled.
> 
> What is the purpose of removing it from 'all'?
> 
> Regards
> 
> RĂ¼diger
> 


Re: svn commit: r1839920 - /httpd/httpd/trunk/modules/ssl/ssl_private.h

Posted by Ruediger Pluem <rp...@apache.org>.

On 09/03/2018 11:06 AM, icing@apache.org wrote:
> Author: icing
> Date: Mon Sep  3 09:06:35 2018
> New Revision: 1839920
> 
> URL: http://svn.apache.org/viewvc?rev=1839920&view=rev
> Log:
> On the trunk:
> 
> SSL protocl TLSv1.3 no longer part of 'all' when configured. Needs to be added explicitly.
> When using 'modern' as SSL policy, TLSv1.3 is enabled.

What is the purpose of removing it from 'all'?

Regards

RĂ¼diger