bugs  

Messages by Date

• 2026/11/01 [Bug 68527] NULL dereference in mod_dir:fixup_dir bugzilla.apache.org via bugs
• 2026/11/01 [Bug 69994] ap_normalize_path bug bugzilla.apache.org via bugs
• 2026/11/01 [Bug 70300] New: Internal error (specific information not available) obtaining certificate bugzilla.apache.org via bugs
• 2026/11/01 [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
• 2026/11/01 [Bug 68527] NULL dereference in mod_dir:fixup_dir bugzilla.apache.org via bugs
• 2026/11/01 [Bug 70284] Require ssl-verify-client broken with h2 bugzilla.apache.org via bugs
• 2026/10/31 [Bug 69404] htdbm poor user check leading to NullDereference bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
• 2026/10/31 [Bug 69404] htdbm poor user check leading to NullDereference bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70289] mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70298] mod_dav_lock: dav_size_indirect() reserves sizeof(int) for a field written as apr_size_t bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70298] mod_dav_lock: dav_size_indirect() reserves sizeof(int) for a field written as apr_size_t bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70274] mod_autht_jwt: worker segfault (NULL deref) on a JWT with empty/non-object claims bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70299] New: mod_dav_lock: dav_generic_load_lock_record() reads the indirect-lock key length as a 4-byte int, but the save path always writes it as a full apr_size_t bugzilla.apache.org via bugs
• 2026/10/31 [Bug 70276] mod_autht_jwt: apr_jose_signature_make() called with wrong argument count → fails to compile against apr-util ≥ 1.7 bugzilla.apache.org via bugs
• 2026/10/30 [Bug 70277] mod_autht_jwt: HAVE_APU_JOSE gate evaluated before apu_version.h is included → module compiles as a no-op stub bugzilla.apache.org via bugs
• 2026/10/30 [Bug 70298] mod_dav_lock: dav_size_indirect() reserves sizeof(int) for a field written as apr_size_t bugzilla.apache.org via bugs
• 2026/10/30 [Bug 70298] New: mod_dav_lock: dav_size_indirect() reserves sizeof(int) for a field written as apr_size_t bugzilla
• 2026/10/29 [Bug 70294] mod_socache_dbm: socache_dbm_iterate skips apr_dbm_close() when the iterator callback fails, leaking an open DBM handle bugzilla
• 2026/10/29 [Bug 70293] mod_proxy_balancer: balancer_handler ignores PROXY_THREAD_LOCK failure yet still calls PROXY_THREAD_UNLOCK, unlike the other three call sites in the same file bugzilla
• 2026/10/29 [Bug 70295] REMOTE_PORT environment variable is invalid when using mod_remoteip bugzilla
• 2026/10/29 [Bug 70294] New: mod_socache_dbm: socache_dbm_iterate skips apr_dbm_close() when the iterator callback fails, leaking an open DBM handle bugzilla
• 2026/10/29 [Bug 70291] mod_ssl: Missing NULL check for sk_X509_INFO_new_null() in ssl_init_proxy_certs() bugzilla
• 2026/10/29 [Bug 70295] New: REMOTE_PORT environment variable is invalid when using mod_remoteip bugzilla
• 2026/10/29 [Bug 70293] New: mod_proxy_balancer: balancer_handler ignores PROXY_THREAD_LOCK failure yet still calls PROXY_THREAD_UNLOCK, unlike the other three call sites in the same file bugzilla
• 2026/10/29 [Bug 70295] REMOTE_PORT environment variable is invalid when using mod_remoteip bugzilla
• 2026/10/28 [Bug 70210] mod_rewrite prefix_stat() reaches a UNC host before UNCList is consulted - incomplete "expand UNC checking" (r1927041), UNCList bypassed on Windows bugzilla
• 2026/10/28 [Bug 70291] New: mod_ssl: Missing NULL check for sk_X509_INFO_new_null() in ssl_init_proxy_certs() bugzilla
• 2026/10/28 Re: [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 Steffen via bugs
• 2026/10/27 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/27 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/27 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/26 [Bug 70289] New: mod_cache stores Vary: * responses when mod_headers adds Vary with Header always bugzilla
• 2026/10/26 [Bug 62141] ABA bug in defer_linger_chain bugzilla
• 2026/10/26 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/26 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/26 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/25 Re: [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 Steffen via bugs
• 2026/10/25 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/24 [Bug 69950] Apachectl configtest does not honor alternate config file (-f option) [with fix] bugzilla
• 2026/10/24 [Bug 70051] httpd trunk - NULL pointer dereference in DAV leads to DOS bugzilla
• 2026/10/24 [Bug 66387] Per directory fcgi handler is ignored if there is a global fcgi handler bugzilla
• 2026/10/24 [Bug 66387] Per directory fcgi handler is ignored if there is a global fcgi handler bugzilla
• 2026/10/24 [Bug 70051] httpd trunk - NULL pointer dereference in DAV leads to DOS bugzilla
• 2026/10/24 [Bug 70176] mod_proxy drops backend Content-Length: 0 on HEAD responses bugzilla
• 2026/10/24 [Bug 66480] AuthBasicFake does not seem to work with e.g. AuthUserFile/Require bugzilla
• 2026/10/24 [Bug 66499] 302 redirects when the :scheme header does not match the connection type bugzilla
• 2026/10/24 [Bug 43513] Persistent backend connections for ProxyPassMatch bugzilla
• 2026/10/24 [Bug 70284] New: Require ssl-verify-client broken with h2 bugzilla
• 2026/10/24 [Bug 70195] mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
• 2026/10/24 [Bug 70051] httpd trunk - NULL pointer dereference in DAV leads to DOS bugzilla
• 2026/10/24 [Bug 63891] Balancer failover fails for POST with small request Body and CL set bugzilla
• 2026/10/24 [Bug 69580] Stream not closed cleanly during simple 304 response. bugzilla
• 2026/10/24 [Bug 66033] Latent read beyond bounds in ap_is_matchexp() [zhbug_httpd_46.2] bugzilla
• 2026/10/24 [Bug 70264] mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
• 2026/10/24 [Bug 70028] mod_cache trunk regression: comma-separated Cache-Control directives are not parsed correctly, allowing private/no-store responses to be cached bugzilla
• 2026/10/24 [Bug 60947] Segfault on startup when using mod_ssl with APR-crypto bugzilla
• 2026/10/24 [Bug 69235] unable to connect to backend with existing rewrite rules. bugzilla
• 2026/10/24 [Bug 69241] balancer URL mangled after rewrite in 2.4.62+ bugzilla
• 2026/10/24 [Bug 66119] Segmentation fault in libpcre when processing Location regex match for a long request path when MPM worked is used in 2.4.53+ bugzilla
• 2026/10/24 [Bug 66525] document when certificate/key/CRL/etc. files are reloaded bugzilla
• 2026/10/24 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/24 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/24 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/23 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/23 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/23 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/23 [Bug 70192] Apache mod_proxy_hcheck — Health Check Mechanism Failure Causing 503 Errors and High CPU/Memory in WebServer bugzilla
• 2026/10/23 [Bug 65463] AddOutputFilterByType does not work for user-defined filters bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 70192] Apache mod_proxy_hcheck — Health Check Mechanism Failure Causing 503 Errors and High CPU/Memory in WebServer bugzilla
• 2026/10/22 [Bug 57448] SSI <!--#set --> cannot capture backreferences from regex match in <!--#if --> bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 40453] lexicographic compare in RewriteCond isn't lexicographic bugzilla
• 2026/10/22 [Bug 68257] FallbackResource causes DirectoryIndex to fail after first try bugzilla
• 2026/10/22 [Bug 69027] Incorrect reference to Digest::SHA1 bugzilla
• 2026/10/22 [Bug 66034] Read beyond bounds via mod_substitute.c [zhbug_httpd_22.1] bugzilla
• 2026/10/22 [Bug 70264] mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
• 2026/10/22 [Bug 70028] mod_cache trunk regression: comma-separated Cache-Control directives are not parsed correctly, allowing private/no-store responses to be cached bugzilla
• 2026/10/22 [Bug 68446] When using an ErrorDocument, a HEAD request still sends the full body bugzilla
• 2026/10/22 [Bug 69648] apxs removes LoadModule line instead of adding it bugzilla
• 2026/10/22 [Bug 69950] Apachectl configtest does not honor alternate config file (-f option) [with fix] bugzilla
• 2026/10/20 [Bug 69976] Please add Actalis to the list of predefined ACME certification authorities bugzilla
• 2026/10/20 [Bug 70282] RFE: handle Retry-After from ACME server bugzilla
• 2026/10/20 [Bug 70282] New: RFE: handle Retry-After from ACME server bugzilla
• 2026/10/20 [Bug 69894] Managed Staplings not shown any more after upgrading to httpd/2.4.66 bugzilla
• 2026/10/20 [Bug 69430] ap_custom_response always overwrites an existing Content-Type Header set in r->headers_out bugzilla
• 2026/10/20 [Bug 54962] Apache will set incorrect Content-Length header and may serve partial files bugzilla
• 2026/10/19 [Bug 70276] mod_autht_jwt: apr_jose_signature_make() called with wrong argument count → fails to compile against apr-util ≥ 1.7 bugzilla
• 2026/10/19 [Bug 62493] mod_cache_socache loses request bodies after revalidation bugzilla
• 2026/10/19 [Bug 70276] mod_autht_jwt: apr_jose_signature_make() called with wrong argument count → fails to compile against apr-util ≥ 1.7 bugzilla
• 2026/10/19 [Bug 39287] Incorrect If-Modified-Since validation (due to synthetic mtime?) bugzilla
• 2026/10/17 [Bug 70009] Test Item -- NotABug -- No Need to do anything bugzilla
• 2026/10/17 [Bug 70009] Test Item -- NotABug -- No Need to do anything bugzilla
• 2026/10/17 [Bug 70222] mod_ssl_ct: unchecked calloc() return dereferenced in ssl_ct_proxy_post_handshake() -- NULL pointer crash under memory pressure bugzilla
• 2026/10/17 [Bug 70222] mod_ssl_ct: unchecked calloc() return dereferenced in ssl_ct_proxy_post_handshake() -- NULL pointer crash under memory pressure bugzilla
• 2026/10/17 [Bug 70009] Test Item -- NotABug -- No Need to do anything bugzilla
• 2026/10/17 [Bug 66333] hdjsjshajajaj bugzilla
• 2026/10/16 [Bug 70275] New: mod_autht_jwt only enforces the "exp" (expiry) and "nbf" (not-before) claims when their JSON value is an integer. If the value is a float or a string, the check is silently skipped and the token is accepted. An expired token whose "exp" is encoded as a fl bugzilla
• 2026/10/16 [Bug 70277] New: mod_autht_jwt: HAVE_APU_JOSE gate evaluated before apu_version.h is included → module compiles as a no-op stub bugzilla
• 2026/10/16 [Bug 70276] New: mod_autht_jwt: apr_jose_signature_make() called with wrong argument count → fails to compile against apr-util ≥ 1.7 bugzilla
• 2026/10/16 [Bug 70274] New: mod_autht_jwt: worker segfault (NULL deref) on a JWT with empty/non-object claims bugzilla
• 2026/10/16 [Bug 70212] mod_http2 leaks internal APR status codes (e.g., 70007 APR_TIMEUP) as raw HTTP/2 GOAWAY error codes bugzilla
• 2026/10/16 [Bug 70272] mod_auth_digest: failed child_init destroys shared rmm state for all processes and leaves the child with dangling pointers bugzilla
• 2026/10/16 [Bug 70272] New: mod_auth_digest: failed child_init destroys shared rmm state for all processes and leaves the child with dangling pointers bugzilla
• 2026/10/15 [Bug 70271] New: mod_proxy: TCP connection pooling retains stale sockets across upstream carrier CGNAT IP rotations bugzilla
• 2026/10/15 [Bug 70270] Sanity check breaks large environment bugzilla
• 2026/10/15 [Bug 70270] New: Sanity check breaks large environment bugzilla
• 2026/10/15 [Bug 70270] Sanity check breaks large environment bugzilla
• 2026/10/14 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/13 [Bug 70267] New: SIGTERM delivered during startup may crash the child bugzilla
• 2026/10/13 [Bug 70266] test_107_frame_lengths.py intermittently fails with AH03490 "scoreboard is full" under CI load bugzilla
• 2026/10/13 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/13 [Bug 70266] New: test_107_frame_lengths.py intermittently fails with AH03490 "scoreboard is full" under CI load bugzilla
• 2026/10/13 [Bug 70265] New: test_proxy_beacon.py flaky: "added backend" logged twice from two different child pids in one test session bugzilla
• 2026/10/12 [Bug 59311] Do not send "Upgrade: h2" header to HTTP/1.1 clients when SSL/TLS is used bugzilla
• 2026/10/12 [Bug 55475] mod_proxy breaks HTTP chunked transfer coding bugzilla
• 2026/10/12 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/12 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/12 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/12 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/12 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/11 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/10 [Bug 70264] New: mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
• 2026/10/10 [Bug 70264] mod_dav advertises TRACE in Allow when TraceEnable is off bugzilla
• 2026/10/10 [Bug 65357] TraceEnable Off Returns Empty Allow to TRACE request bugzilla
• 2026/10/10 [Bug 66499] 302 redirects when the :scheme header does not match the connection type bugzilla
• 2026/10/10 [Bug 64507] module does not send Allow: header bugzilla
• 2026/10/10 [Bug 70204] Make sensitive ap_expr file functions deny-by-default for new callers bugzilla
• 2026/10/09 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/09 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/09 [Bug 69186] Apache httpd generates body for 205 status code bugzilla
• 2026/10/09 [Bug 70263] New: mod_remoteip clears remote_host and triggers unbracketed IPv6 forward DNS lookups (appending search domain) bugzilla
• 2026/10/08 [Bug 61430] mod_proxy_fcgi is not RFC 3875 compliant (section 6.2.2 Local Redirect Response) bugzilla
• 2026/10/08 [Bug 70188] content-range header is not set with init range bugzilla
• 2026/10/08 [Bug 63893] Bogus warning "unsupported command 20" bugzilla
• 2026/10/08 [Bug 69933] status of worker thread in scoreboard not correct due to exit of extra process bugzilla
• 2026/10/08 [Bug 70012] Substitute with empty replacement triggers subsequent Substitute empty reply bugzilla
• 2026/10/08 [Bug 70261] Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/08 [Bug 70257] mod_http2: GOAWAY INTERNAL_ERROR on whole connection when client RST_STREAM races HEADERS send (on_frame_not_send_cb) bugzilla
• 2026/10/08 [Bug 70255] mod_proxy_beacon: pre-auth per-tick memory amplification via UDP flood (missing per-datagram subpool) bugzilla
• 2026/10/08 [Bug 70255] mod_proxy_beacon: pre-auth per-tick memory amplification via UDP flood (missing per-datagram subpool) bugzilla
• 2026/10/08 [Bug 70261] New: Httpd 2.4.69 crash with mod_authnz_ldap.so bugzilla
• 2026/10/07 [Bug 66486] DTD HTML 3.2 Final still seen in Directory Indexes as default in 2023 bugzilla
• 2026/10/07 [Bug 68995] Apache compile goes through but httpd -V throws error bugzilla
• 2026/10/07 [Bug 66583] The Apache2.4.57 service crash with php7.3 Every few days bugzilla
• 2026/10/07 [Bug 68872] xmlhttprequest.onprogress behavior changed after updated to 2.4.59 bugzilla
• 2026/10/07 [Bug 66168] Segmentation fault bugzilla
• 2026/10/07 [Bug 66486] DTD HTML 3.2 Final still seen in Directory Indexes as default in 2023 bugzilla
• 2026/10/07 [Bug 66526] provide a better way to reload TLS certificates/keys/etc. bugzilla
• 2026/10/07 [Bug 68517] Getting AH00898: Error during SSL Handshake with remote server while using apache as reverse proxy bugzilla
• 2026/10/07 [Bug 69149] Apache misbehave with a folder named math bugzilla
• 2026/10/07 [Bug 69732] Apache HTTP Server emits empty list elements in header fields — violates RFC 9110 §5.6.1.1 bugzilla
• 2026/10/07 [Bug 62903] Better handling of a thread limit forced by cgroups via systemd bugzilla
• 2026/10/07 [Bug 68860] Segmentation fault when disabling config with SSLStaplingCache shmcb and two graceful reloads bugzilla
• 2026/10/07 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70260] Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70260] New: Crashes in libaprutil-1.dll with 2.4.69 bugzilla
• 2026/10/07 [Bug 70259] New: apxs -A may leave a module enabled when duplicate LoadModule entries exist bugzilla
• 2026/10/07 [Bug 70259] apxs -A may leave a module enabled when duplicate LoadModule entries exist bugzilla
• 2026/10/07 [Bug 70258] apxs -A mishandles LoadModule entries at configuration file boundaries bugzilla
• 2026/10/07 [Bug 70258] New: apxs -A mishandles LoadModule entries at configuration file boundaries bugzilla
• 2026/10/06 [Bug 70169] RewriteCond expr !(...) is true if ... fails bugzilla
• 2026/10/06 [Bug 70176] mod_proxy drops backend Content-Length: 0 on HEAD responses bugzilla
• 2026/10/06 [Bug 70207] RemoteIPTrustedProxyList / RemoteIPInternalProxyList entries silently ignored at request time bugzilla
• 2026/10/06 [Bug 70193] Redis timeouts using the wrong unit bugzilla
• 2026/10/06 [Bug 70213] ProxyPassMatch worker selection depends on backreference length bugzilla
• 2026/10/06 [Bug 70195] mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
• 2026/10/06 [Bug 70195] mod_http2 rejects asterisk-form "OPTIONS *" with 400 since 2.4.55 bugzilla
• 2026/10/05 [Bug 70257] New: mod_http2: GOAWAY INTERNAL_ERROR on whole connection when client RST_STREAM races HEADERS send (on_frame_not_send_cb) bugzilla
• 2026/10/05 [Bug 70256] Managed Staplings not shown any more after upgrading to httpd/2.4.69 bugzilla
• 2026/10/05 [Bug 70256] Managed Staplings not shown any more after upgrading to httpd/2.4.69 bugzilla
• 2026/10/05 [Bug 70256] New: Managed Staplings not shown any more after upgrading to httpd/2.4.69 bugzilla
• 2026/10/04 [Bug 70255] New: mod_proxy_beacon: pre-auth per-tick memory amplification via UDP flood (missing per-datagram subpool) bugzilla
• 2026/10/02 [Bug 65307] Rewrite and improvements of mod_unique_id bugzilla
• 2026/09/29 [Bug 65159] mod_unique_id generates non-unique ids bugzilla
• 2026/09/29 [Bug 60075] segmentation fault during a false request bugzilla
• 2026/09/29 [Bug 64252] Upgrade PCRE to PCRE2 bugzilla
• 2026/09/29 [Bug 57477] mod_auth_digest AH00052: child pid $pid exit signal Floating point exception bugzilla
• 2026/09/29 [Bug 66228] Apache fails to start with "(38)Function not implemented: AH00141: Could not initialize random number generator" bugzilla
• 2026/09/29 [Bug 65159] mod_unique_id generates non-unique ids bugzilla
• 2026/09/25 [Bug 64263] TLSv1.3 with SSLVerifyClient optional inside a Location returns 403 bugzilla
• 2026/09/24 [Bug 64263] TLSv1.3 with SSLVerifyClient optional inside a Location returns 403 bugzilla
• 2026/09/24 [Bug 63096] TLS 1.3: Client certificates don't work if they are optional on virtual host but required on location bugzilla
• 2026/09/24 [Bug 63096] TLS 1.3: Client certificates don't work if they are optional on virtual host but required on location bugzilla
• 2026/09/24 [Bug 69421] SSLVerifyClient require + TLS 1.3 = Cannot perform Post-Handshake Authentication bugzilla
• 2026/09/24 [Bug 63096] TLS 1.3: Client certificates don't work if they are optional on virtual host but required on location bugzilla

• Earlier messages