From: Stefan Eissing <icing@apache.org>
Date: Fri, 23 Oct 2015 08:38:24 +0000 (+0000)
Subject: changelog update re r1709995
X-Git-Tag: 2.5.0-alpha~2700
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0aae25b3c3eb679f0d687f572b7ade4707569d11;p=thirdparty%2Fapache%2Fhttpd.git

changelog update re r1709995

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1710141 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/CHANGES b/CHANGES
index d92157d0dc9..6f46298db81 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,18 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.5.0
 
+  *) mod_ssl: when receiving requests for other virtual hosts than the handshake
+     server, the SSL parameters are checked for equality. With equal 
+     configuration, requests are passed for processing. Any change will trigger
+     the old behaviour of "421 Misdirected Request".
+     SSL now remembers the cipher suite that was used for the last handshake.
+     This is compared against for any vhost/directory cipher specification. 
+     Detailed examination of renegotiation is only done when these do not
+     match.
+     Renegotiation is 403ed when a master connection is present. Exact reason
+     is given additionally in a request note.
+     [Stefan Eissing]
+     
   *) core: Limit to ten the number of tolerated empty lines between request,
      and consume them before the pipelining check to avoid possible response
      delay when reading the next request without flushing.  [Yann Ylavic]