From: Stefan Fritsch <sf@apache.org>
Date: Tue, 18 Aug 2015 09:40:44 +0000 (+0000)
Subject: propose mod_ssl fix
X-Git-Tag: 2.2.32~211
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d78ab56d643ce0dad9015c86a752f5cd69413cfd;p=thirdparty%2Fapache%2Fhttpd.git

propose mod_ssl fix

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1696380 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 892551bb8a6..7482b0145ce 100644
--- a/STATUS
+++ b/STATUS
@@ -126,6 +126,14 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
          http://people.apache.org/~rpluem/patches/proxy_race_retry_2.2.x.diff
       +1: rpluem,
 
+  *) mod_ssl: Fix spurious errors when loading certificate chain
+     2.2.x uses a home grown version of SSL_CTX_use_certificate_chain_file
+     called SSL_CTX_use_certificate_chain() which also needs the
+     ERR_clear_error() call.
+     See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794383
+     trunk patch: N/A, but similar to https://svn.apache.org/r1588427
+     2.2.x patch: http://people.apache.org/~sf/SSL_CTX_use_certificate_clear_errors.diff
+
 PATCHES/ISSUES THAT ARE STALLED
 
    * mod_proxy_balancer: Always initialize the shared parameters of a load