/[Apache-SVN]
ViewVC logotype

Revision 1917600

Jump to revision: Previous Next
Author: jorton
Date: Thu May 9 09:05:38 2024 UTC (7 weeks, 1 day ago)
Changed paths: 4
Log Message: 
Fail if SSLInsecureRenegotiation is used with mod_ssl, CVE-2009-3555
is now approaching 15 years old.

* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLInsecureRenegotiation):
  Fail if used.
  (ssl_config_server_new, ssl_config_server_merge): Remove insecure
  reneg handling.

* modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): Remove
  insecure_reneg handling.

Changed paths

Path Details
Directoryhttpd/httpd/trunk/docs/manual/mod/mod_ssl.xml modified , text changed
Directoryhttpd/httpd/trunk/modules/ssl/ssl_engine_config.c modified , text changed
Directoryhttpd/httpd/trunk/modules/ssl/ssl_engine_init.c modified , text changed
Directoryhttpd/httpd/trunk/modules/ssl/ssl_private.h modified , text changed
infrastructure at apache.org
 ViewVC Help
Powered by ViewVC 1.1.26