From: William A. Rowe Jr <wrowe@apache.org>
Date: Thu, 2 Jun 2016 22:34:16 +0000 (+0000)
Subject: Propose a fix for unexpectedly unexpected behavior
X-Git-Tag: 2.4.21~103
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=657949756cf475d788c0df144faf125959e8174c;p=thirdparty%2Fapache%2Fhttpd.git

Propose a fix for unexpectedly unexpected behavior

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1746648 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 639da52db46..f7bf060c9a7 100644
--- a/STATUS
+++ b/STATUS
@@ -212,7 +212,16 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      OPENSSL_Applink error. PR59630
      trunk patch: http://svn.apache.org/r1745767
      2.4.x: trunk works (modulo CHANGES)
-     +1 gsmith,
+     +1: gsmith,
+     +0: wrowe [I did not observe such issues, and will review the patch/issue]
+
+  *) Correct the behavior and interaction between SSLProxyCheckPeer[CN|Name], 
+     such that disabling either disables both, and that enabling either will
+     trigger the more comprehensive SSLProxyCheckPeerName behavior.
+     Only a single configuration remains to enable the legacy behavior, which is
+     to explicitly disable SSLProxyCheckPeerName and enable SSLProxyCheckPeerCN.
+     2.4.x patch: https://github.com/wrowe/patches/blob/master/fix_proxy_check_peer-2.4.x.patch
+     +1: wrowe
 
 PATCHES/ISSUES THAT ARE BEING WORKED