Opened 15 years ago

Closed 15 years ago

#90 closed defect (fixed)

Upgrade SNI patch

Reported by: andersk Owned by: mitchb
Priority: normal Milestone:
Component: web Keywords:
Cc:

Description

​https://sni.velox.ch/misc/httpd-2.2.x-sni.patch was updated 2009-04-08, so we should update our patched httpd.

Change History (3)

comment:1 Changed 15 years ago by mitchb

Comments related to what prompted the update can be found in the Apache ticket tracking the backport-to-2.2.x request here:

​https://issues.apache.org/bugzilla/show_bug.cgi?id=34607#c16 "This patch is more than obsolete, actually. Since January 2008, a lot of improvements have been checked into trunk (e.g. Rüdiger's recent work on storing the server_rec in the proper place ​http://svn.apache.org/viewvc?view=rev&revision=757463)."

--Kaspar Brand

The original patch can also be found from that ticket. A quick glance indicates that the changes include:

o A bunch of diff context/linenum updates o A new requirement that if the client does SNI, it also sends a

Host: header with a hostname matching the SNI name

o A bunch of SSL renegotiation fixes

comment:2 Changed 15 years ago by mitchb

  • Owner set to mitchb
  • Status changed from new to assigned

comment:3 Changed 15 years ago by mitchb

  • Resolution set to fixed
  • Status changed from assigned to closed

We're running the new patch now. Yay.

Note: See TracTickets for help on using tickets.