From: Yann Ylavic <ylavic@apache.org>
Date: Thu, 5 Jan 2017 00:35:09 +0000 (+0000)
Subject: Propose: openssl < 1.0.2 are EOL, and SSLv3 is disabled by default on active versions.
X-Git-Tag: 2.2.32~42
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=36e4e1886b8126a2727e99a109f917ed74236c35;p=thirdparty%2Fapache%2Fhttpd.git

Propose: openssl < 1.0.2 are EOL, and SSLv3 is disabled by default on active versions.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1777392 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index ce216b73472..c9821f4996c 100644
--- a/STATUS
+++ b/STATUS
@@ -204,6 +204,14 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      2.2.x patch: http://home.apache.org/~ylavic/patches/httpd-2.2.x-fix_warnings_r1125877.patch
      +1: ylavic, wrowe
 
+  *) mod_ssl: Support compilation against libssl built with OPENSSL_NO_SSL3
+     [but without: and change the compiled-in default for SSL[Proxy]Protocol
+                   to "all -SSLv3", in accordance with RFC 7568]
+     trunk patch: https://svn.apache.org/r1703952
+     2.4.x patch: https://svn.apache.org/r1706008
+     2.2.x patch: http://home.apache.org/~ylavic/patches/httpd-2.2.x-backport_r1703952.patch
+     +1: ylavic
+
 PATCHES/ISSUES THAT ARE STALLED
 
    * mod_proxy_balancer: Always initialize the shared parameters of a load