]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Merge of r1890693,r1890696 from trunk:
authorStefan Eissing <icing@apache.org>
Fri, 3 Sep 2021 13:28:01 +0000 (13:28 +0000)
committerStefan Eissing <icing@apache.org>
Fri, 3 Sep 2021 13:28:01 +0000 (13:28 +0000)
commit7e2e41a4215c9e2a0f20da8859c1e89af2e1c5d7
treecdf108f6867253ee0fd66ec9f0473baec10664f7
parent08cb85cd0399abdff38a34c9f700158b7bb73691
Merge of r1890693,r1890696 from trunk:

mod_ssl: tighten the handling of ALPN for outgoing (proxy)
     connections. If ALPN protocols are provided and sent to the
     remote server, the received protocol selected is inspected
     and checked for a match. Without match, the peer handshake
     fails.
     An exception is the proposal of "http/1.1" where it is
     accepted if the remote server did not answer ALPN with
     a selected protocol. This accomodates for hosts that do
     not observe/support ALPN and speak http/1.x be default.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1892869 13f79535-47bb-0310-9956-ffa450edef68
changes-entries/ssl_alpn_outgoing.txt [new file with mode: 0644]
modules/ssl/ssl_engine_io.c