Google Git
Sign in
apache / httpd / 5971ee662032d861024462a18f950e4eed4ab8ad
commit5971ee662032d861024462a18f950e4eed4ab8ad[log] [tgz]
authorJoe Orton <jorton@apache.org>Thu May 09 09:05:38 2024 +0000
committerJoe Orton <jorton@apache.org>Thu May 09 09:05:38 2024 +0000
tree26112bb1a27010ea0b7c9f2afbbbee7dc5ccfb6d
parentac774f7340bd1e2bb5ff092e27e75cd0051f7783 [diff]
Fail if SSLInsecureRenegotiation is used with mod_ssl, CVE-2009-3555
is now approaching 15 years old.

* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLInsecureRenegotiation):
  Fail if used.
  (ssl_config_server_new, ssl_config_server_merge): Remove insecure
  reneg handling.

* modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): Remove
  insecure_reneg handling.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917600 13f79535-47bb-0310-9956-ffa450edef68
4 files changed
tree: 26112bb1a27010ea0b7c9f2afbbbee7dc5ccfb6d
  1. .github/
  2. build/
  3. changes-entries/
  4. docs/
  5. include/
  6. modules/
  7. os/
  8. server/
  9. srclib/
  10. support/
  11. test/
  12. README.md ⇨ README
  13. .gdbinit
  14. .gitignore
  15. ABOUT_APACHE
  16. acinclude.m4
  17. ap.d
  18. Apache-apr2.dsw
  19. Apache.dsw
  20. apache_probes.d
  21. BuildAll.dsp
  22. BuildBin.dsp
  23. buildconf
  24. CHANGES
  25. CMakeLists.txt
  26. config.layout
  27. configure.in
  28. emacs-style
  29. httpd.dsp
  30. INSTALL
  31. InstallBin.dsp
  32. LAYOUT
  33. libapreq.dsp
  34. libhttpd.dsp
  35. LICENSE
  36. Makefile.in
  37. Makefile.win
  38. NOTICE
  39. NWGNUmakefile
  40. README
  41. README.CHANGES
  42. README.cmake
  43. README.platforms
  44. ROADMAP
  45. SECURITY.md
  46. STATUS
  47. VERSIONING