]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
mod_ssl: add support for subjectAltName-based host name checking in proxy mode
authorKaspar Brand <kbrand@apache.org>
Wed, 26 Dec 2012 10:54:54 +0000 (10:54 +0000)
committerKaspar Brand <kbrand@apache.org>
Wed, 26 Dec 2012 10:54:54 +0000 (10:54 +0000)
commit32e29710963e764fa39a1cfb731736299ccc95cd
tree5225e29293b009b82fc01ab7717f24dc7b5f8109
parente99d3a869988dc22bd9bb5f3ab03fd4f27298bfc
mod_ssl: add support for subjectAltName-based host name checking in proxy mode
(PR 54030)

factor out code from ssl_engine_init.c:ssl_check_public_cert()
to ssl_util_ssl.c:SSL_X509_match_name()

introduce new SSLProxyCheckPeerName directive, which should eventually
obsolete SSLProxyCheckPeerCN

ssl_engine_io.c:ssl_io_filter_handshake(): avoid code duplication
when aborting with HTTP_BAD_GATEWAY

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1425874 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
docs/log-message-tags/next-number
docs/manual/mod/mod_ssl.xml
modules/ssl/mod_ssl.c
modules/ssl/ssl_engine_config.c
modules/ssl/ssl_engine_init.c
modules/ssl/ssl_engine_io.c
modules/ssl/ssl_private.h
modules/ssl/ssl_util_ssl.c
modules/ssl/ssl_util_ssl.h