]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Merge /httpd/httpd/trunk:r1920747,1920751
authorStefan Eissing <icing@apache.org>
Tue, 17 Sep 2024 12:10:23 +0000 (12:10 +0000)
committerStefan Eissing <icing@apache.org>
Tue, 17 Sep 2024 12:10:23 +0000 (12:10 +0000)
commitc2fb699b8fea59069f0dfef45b07d7ddc96c1a16
tree297e0f0240a2aa8c9812f729bdf199068f1f4f59
parentb7988b2d974872fd8f66f45b7b9600926c04aaf7
Merge /httpd/httpd/trunk:r1920747,1920751

  *) mod_md: update to version 2.4.28
     - When the server starts, it looks for new, staged certificates to
       activate. If the staged set of files in 'md/staging/<domain>' is messed
       up, this could prevent further renewals to happen. Now, when the staging
       set is present, but could not be activated due to an error, purge the
       whole directory. [icing]
     - Fix certificate retrieval on ACME renewal to not require a 'Location:'
       header returned by the ACME CA. This was the way it was done in ACME
       before it became an IETF standard. Let's Encrypt still supports this,
       but other CAs do not. [icing]
     - Restore compatibility with OpenSSL < 1.1. [ylavic]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1920753 13f79535-47bb-0310-9956-ffa450edef68
15 files changed:
changes-entries/md_v2.4.28.txt [new file with mode: 0644]
modules/md/md_acme_drive.c
modules/md/md_reg.c
modules/md/md_version.h
test/modules/md/conftest.py
test/modules/md/md_cert_util.py
test/modules/md/md_env.py
test/modules/md/test_502_acmev2_drive.py
test/modules/md/test_702_auto.py
test/modules/md/test_730_static.py
test/modules/md/test_741_setup_errors.py
test/modules/md/test_801_stapling.py
test/modules/md/test_901_message.py
test/modules/md/test_920_status.py
test/pyhttpd/certs.py