]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Bring SNI behavior into better conformance with RFC 6066:
authorKaspar Brand <kbrand@apache.org>
Sat, 5 Apr 2014 12:57:43 +0000 (12:57 +0000)
committerKaspar Brand <kbrand@apache.org>
Sat, 5 Apr 2014 12:57:43 +0000 (12:57 +0000)
commit05316260812ab47df957449e26594503b930b45b
tree837de5f96f807be51e83c7eed466fc708ff5979f
parentc9656681211d0c13bb66489e0740b3676e9c1b0e
Bring SNI behavior into better conformance with RFC 6066:

- no longer send a warning-level unrecognized_name(112) alert
  when no matching vhost is found (PR 56241)

- at startup, only issue warnings about IP/port conflicts and name-based
  SSL vhosts when running with an OpenSSL without TLS extension support
  (almost 5 years after SNI was added to 2.2.x, the
  "[...] only work for clients with TLS server name indication support"
  warning feels obsolete)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1585090 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
modules/ssl/ssl_engine_init.c
modules/ssl/ssl_engine_kernel.c