]> git.ipfire.org Git - thirdparty/apache/httpd.git/commitdiff
mod_ssl: Allow for "SSLCompression off" still when OPENSSL_NO_COMP.
authorYann Ylavic <ylavic@apache.org>
Tue, 26 Mar 2024 17:00:09 +0000 (17:00 +0000)
committerYann Ylavic <ylavic@apache.org>
Tue, 26 Mar 2024 17:00:09 +0000 (17:00 +0000)
Latest OpenSSL versions have OPENSSL_NO_COMP by default, avoid breaking
existing "SSLCompression off" in configurations since it's a noop.

* modules/ssl/ssl_engine_config.c(ssl_cmd_SSLCompression):
  Don't fail for OPENSSL_NO_COMP if the flag is "off".

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1916561 13f79535-47bb-0310-9956-ffa450edef68

modules/ssl/ssl_engine_config.c

index efd293169b126af7e67437a2f7a8584a67977131..f68ef7e8008827d7ffe7faaa2739c9dce405e495 100644 (file)
@@ -951,10 +951,12 @@ const char *ssl_cmd_SSLCompression(cmd_parms *cmd, void *dcfg, int flag)
         }
     }
     sc->compression = flag ? TRUE : FALSE;
-    return NULL;
 #else
-    return "Setting Compression mode unsupported; not implemented by the SSL library";
+    if (flag) {
+        return "Setting Compression mode unsupported; not implemented by the SSL library";
+    }
 #endif
+    return NULL;
 }
 
 const char *ssl_cmd_SSLHonorCipherOrder(cmd_parms *cmd, void *dcfg, int flag)