]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
* Introduce SSLFIPS directive to support OpenSSL FIPS_mode; permits all
authorJim Jagielski <jim@apache.org>
Mon, 12 Jul 2010 18:47:45 +0000 (18:47 +0000)
committerJim Jagielski <jim@apache.org>
Mon, 12 Jul 2010 18:47:45 +0000 (18:47 +0000)
commit07ba9ba5609b58f054fcec53f9baa00f9f8d8cf9
treef23c19fe6b31dd1f3d3abb7895eab04d24b4d915
parent42cbba785a04a7644a293c9483eaa1450b3f0dae
  * Introduce SSLFIPS directive to support OpenSSL FIPS_mode; permits all
      builds of mod_ssl to use 'SSLFIPS off' for portability, but the proper
          build of openssl is required for 'SSLFIPS on'.
              PR: 46270  [Dr Stephen Henson <steve openssl.org>, William Rowe]
                  Trunk patch: http://svn.apache.org/viewvc?rev=925980&view=rev
                                   http://svn.apache.org/viewvc?rev=926000&view=rev
                                                    http://svn.apache.org/viewvc?rev=926614&view=rev
                                                                     http://svn.apache.org/viewvc?rev=926619&view=rev
                                                                         2.2.x patch: http://people.apache.org/~wrowe/ssl-fips-2.2.patch
                                                                             +1: wrowe
                                                                                 minfrin: Doesn't build on v2.2 until you add r926614. With r926614, +1.
                                                                                     wrowe: Added both of rpluem's proposed patched, 926614 and 926619
                                                                                         +1: drh, rjung, jim
                                                                                             rjung: We should add a note about the first version providing this
                                                                                                        option in the docs page, like e.g. we did for SSLInsecureRenegotiation.
                                                                                                            wrowe asks; you mean <Compatibility> tag?  Yes, of course.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963430 13f79535-47bb-0310-9956-ffa450edef68
STATUS
docs/manual/mod/mod_ssl.xml
modules/ssl/mod_ssl.c
modules/ssl/ssl_engine_config.c
modules/ssl/ssl_engine_init.c
modules/ssl/ssl_private.h
modules/ssl/ssl_toolkit_compat.h