]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Add "SSLHonorCipherOrder" directive to enable the OpenSSL 0.9.7 flag
authorJoe Orton <jorton@apache.org>
Thu, 3 Jun 2004 13:03:08 +0000 (13:03 +0000)
committerJoe Orton <jorton@apache.org>
Thu, 3 Jun 2004 13:03:08 +0000 (13:03 +0000)
commitfded34ddf6d7905887ba628ce437a7af754de7f6
tree5cf9514a52b76e34cb15f200b472652763ae6d00
parent0433fae13d4179deec75e6b814198212d34cec82
Add "SSLHonorCipherOrder" directive to enable the OpenSSL 0.9.7 flag
which uses the server's cipher preference order rather than the
client's.

* modules/ssl/ssl_private.h (struct SSLSrvConfigRec): Add
cipher_server_pref field.

* modules/ssl/ssl_engine_config.c (ssl_config_server_create,
ssl_config_server_merge): Initialize and merge cipher_server_pref
field.
(ssl_cmd_SSLHonorCipherOrder): New function.

* modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): Set the
context option SSL_OP_CIPHER_SERVER_PREFERENCE when required.

PR: 28665
Submitted by: Jim Shneider <jschneid netilla.com>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@103832 13f79535-47bb-0310-9956-ffa450edef68
mod_ssl.c
ssl_engine_config.c
ssl_engine_init.c
ssl_private.h