From: Kaspar Brand <kbrand@apache.org>
Date: Sat, 19 Nov 2011 06:57:32 +0000 (+0000)
Subject: Propose a new backport for tweaking mod_ssl's default config
X-Git-Tag: 2.2.22~80
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=006a707229c4c633dd7ba52e0e1012115b48c1a3;p=thirdparty%2Fapache%2Fhttpd.git

Propose a new backport for tweaking mod_ssl's default config

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1203962 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 729bafc3393..ea4d639d823 100644
--- a/STATUS
+++ b/STATUS
@@ -144,12 +144,13 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
     that fix the check for the timeout status?
     jfclere: Ooops see above.
 
-  * mod_ssl: Update default config (SSLCipherSuite, SSLHonorCipherOrder, MSIE pattern)
-    Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=966160
-                 http://svn.apache.org/viewvc?view=revision&revision=1132793
-                 http://svn.apache.org/viewvc?view=revision&revision=1135234
-    2.2.x patch: http://people.apache.org/~rjung/patches/default-sslciphersuite_and_sslhonorciphers_2.2.patch
-    +1: rjung, sf
+  * mod_ssl: Update default config (SSLProtocol, SSLCipherSuite, MSIE pattern)
+    Trunk patch: http://svn.apache.org/viewvc?view=revision&revision=1132793
+                 http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in?rev=1203752&r1=1203751&r2=1203752&view=diff
+    2.2.x patch: http://people.apache.org/~kbrand/mod_ssl_config_defaults-2.2.x.patch
+    (disabling SSLv2 in SSLProtocol is only required for 2.2.x, since trunk
+     and 2.4.x no longer support this version, see r1203491 and r1203495)
+    +1: kbrand (non-binding)
 
 PATCHES/ISSUES THAT ARE STALLED