]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Add "SSLHonorCipherOrder" directive to enable the OpenSSL 0.9.7 flag
authorJoe Orton <jorton@apache.org>
Thu, 3 Jun 2004 13:03:08 +0000 (13:03 +0000)
committerJoe Orton <jorton@apache.org>
Thu, 3 Jun 2004 13:03:08 +0000 (13:03 +0000)
commite9ef26208528ca4d7a7a4593773589239f74bc0a
treeb1d44d6e926f97940cb0f769256bab3923fa73fa
parent0e522dcda802e5a9aebb1c4e471a871de33831aa
Add "SSLHonorCipherOrder" directive to enable the OpenSSL 0.9.7 flag
which uses the server's cipher preference order rather than the
client's.

* modules/ssl/ssl_private.h (struct SSLSrvConfigRec): Add
cipher_server_pref field.

* modules/ssl/ssl_engine_config.c (ssl_config_server_create,
ssl_config_server_merge): Initialize and merge cipher_server_pref
field.
(ssl_cmd_SSLHonorCipherOrder): New function.

* modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): Set the
context option SSL_OP_CIPHER_SERVER_PREFERENCE when required.

PR: 28665
Submitted by: Jim Shneider <jschneid netilla.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@103832 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
modules/ssl/mod_ssl.c
modules/ssl/ssl_engine_config.c
modules/ssl/ssl_engine_init.c
modules/ssl/ssl_private.h