]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
backport from trunk and 2.2.x:
authorJeff Trawick <trawick@apache.org>
Fri, 7 Oct 2005 23:55:44 +0000 (23:55 +0000)
committerJeff Trawick <trawick@apache.org>
Fri, 7 Oct 2005 23:55:44 +0000 (23:55 +0000)
commit78097bc324d100e0c68d234d3bc3c0f218d97112
tree815e9cdad0ec1f27203fdcbbbe8f0745e1c38a94
parent5ccac81f218db4036e7e2c8eb8f8f90efb7957b4
backport from trunk and 2.2.x:

   SECURITY: CAN-2005-2700 (cve.mitre.org)
   mod_ssl: Fix a security issue where "SSLVerifyClient" was not
   enforced in per-location context if "SSLVerifyClient optional"
   was configured in the vhost configuration.

Submitted by: Joe Orton
Reviewed by: wrowe, trawick

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@307220 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
STATUS
modules/ssl/ssl_engine_kernel.c