From: Stefan Fritsch <sf@apache.org>
Date: Mon, 30 Jul 2012 20:42:09 +0000 (+0000)
Subject: That patch needs some work
X-Git-Tag: 2.2.23~84
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=99b69ef616872e1f0fdfdaecc086ff78d3b3a06d;p=thirdparty%2Fapache%2Fhttpd.git

That patch needs some work


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1367286 13f79535-47bb-0310-9956-ffa450edef68
---

diff --git a/STATUS b/STATUS
index 1afdff084e6..c25263ec807 100644
--- a/STATUS
+++ b/STATUS
@@ -186,6 +186,13 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
             preferrably, and it would be good if mod_ssl.xml also includes
             the change to the section about the SSLProtocol directive
             (see r1222921).
+    -1: sf:
+        - ssl_engine_init.c: misses two "ctx = SSL_CTX_new(method);" calls
+          (or move the existing ones after the if blocks).
+        - The handling of "SSLProtocol all -SSLv2" is broken,
+          resulting in a "No SSL protocols available" error.
+          This is due to the "thisopt = SSL_PROTOCOL_SSLV2" line being
+          removed in the OPENSSL_NO_TLSEXT case.
 
    * mod_ssl: Add RFC 5878 support. This allows support of mechanisms
               such as Certificate Transparency. Note that new