]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
*) mod_ssl: tighten the handling of ALPN for outgoing (proxy)
authorStefan Eissing <icing@apache.org>
Fri, 11 Jun 2021 10:45:25 +0000 (10:45 +0000)
committerStefan Eissing <icing@apache.org>
Fri, 11 Jun 2021 10:45:25 +0000 (10:45 +0000)
commit06a3e22e280706c199dae05367b377f0a16c39e8
tree4366b70ed6d4b0ac882386e01598a7ca806af5e5
parenta4f45f275b7d90240f2ebd28834585e04deae165
  *) mod_ssl: tighten the handling of ALPN for outgoing (proxy)
     connections. If ALPN protocols are provided and sent to the
     remote server, the received protocol selected is inspected
     and checked for a match. Without match, the peer handshake
     fails.
     An exception is the proposal of "http/1.1" where it is
     accepted if the remote server did not answer ALPN with
     a selected protocol. This accomodates for hosts that do
     not observe/support ALPN and speak http/1.x be default.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1890693 13f79535-47bb-0310-9956-ffa450edef68
changes-entries/ssl_alpn_outgoing.txt [new file with mode: 0644]
modules/ssl/ssl_engine_io.c