Re: [ANNOUNCE] mod_ssl 2.8.10

2002-08-30 Thread Martin Kraemer 

Zum Thema Security und so:
Ich habe gesehen, dass seit 67 Tagen keine Datei im mod_ssl Repository
(so, wie es per rsync geliefert wird) mehr modifiziert wurde.

Ist das aus Sicherheitsgruenden, oder hat sich das Repository tatsaechlich
nicht veraendert?

Gruss,
  Martin
-- 
[EMAIL PROTECTED] | Fujitsu Siemens
Fon: +49-89-636-46021, FAX: +49-89-636-47655 | 81730  Munich,  Germany
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]

[ANNOUNCE] mod_ssl 2.8.10

2002-06-24 Thread Ralf S. Engelschall 

Another bugfixing round in the maintainance of mod_ssl 2.8 for Apache 1.3.

Fetch it and upgrade from:

 o  http://www.modssl.org/source/
 o   ftp://ftp.modssl.org/source/

Yours,
   Ralf S. Engelschall
   [EMAIL PROTECTED]
   www.engelschall.com

  Changes with mod_ssl 2.8.10 (19-Jun-2002 to 24-Jun-2002)

   *) Fixed off-by-one buffer overflow bug in the compatibility
  functionality (mapping of old directives to new ones).

   *) Fixed memory leak in processing of CA certificates.

   *) In case there is actually a certificate chain in the session cache,
  we now use the value of SSL_get_peer_certificate(ssl) to verify as
  it will have been removed from the chain before it was put in the
  cache.

   *) Seed the PRNG with a maximum of 1K from the internal scoreboard.
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]