You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by yl...@apache.org on 2016/06/14 09:35:13 UTC
svn commit: r1748368 - /httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
Author: ylavic
Date: Tue Jun 14 09:35:13 2016
New Revision: 1748368
URL: http://svn.apache.org/viewvc?rev=1748368&view=rev
Log:
-m
Modified:
httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
Modified: httpd/httpd/trunk/modules/ssl/ssl_engine_init.c
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ssl/ssl_engine_init.c?rev=1748368&r1=1748367&r2=1748368&view=diff
==============================================================================
--- httpd/httpd/trunk/modules/ssl/ssl_engine_init.c (original)
+++ httpd/httpd/trunk/modules/ssl/ssl_engine_init.c Tue Jun 14 09:35:13 2016
@@ -891,7 +891,12 @@ static apr_status_t ssl_init_ctx_crl(ser
X509_STORE *store = SSL_CTX_get_cert_store(mctx->ssl_ctx);
unsigned long crlflags = 0;
char *cfgp = mctx->pkp ? "SSLProxy" : "SSL";
- int crl_check_mode = mctx->crl_check_mask & ~SSL_CRLCHECK_FLAGS;
+ int crl_check_mode;
+
+ if (mctx->crl_check_mask == UNSET) {
+ mctx->crl_check_mask = SSL_CRLCHECK_NONE;
+ }
+ crl_check_mode = mctx->crl_check_mask & ~SSL_CRLCHECK_FLAGS;
/*
* Configure Certificate Revocation List (CRL) Details