Re: [Update] Support for OpenSSL 1.1.0

2016-03-23 Thread Rainer Jung
not before 2.4.19 -> not before 2.4.20 ... Am 23.03.2016 um 15:18 schrieb Rainer Jung: OpenSSL 1.1.0 pre 4 = Beta 1 is out. I did another round of compatibility updates for mod_ssl. Apart form fixing Bugs, the OpenSSL 1.1.0 API is supposed to stay stable now. So I hope mod_ssl can stabilize

Re: [Update] Support for OpenSSL 1.1.0

2016-03-23 Thread Rainer Jung
OpenSSL 1.1.0 pre 4 = Beta 1 is out. I did another round of compatibility updates for mod_ssl. Apart form fixing Bugs, the OpenSSL 1.1.0 API is supposed to stay stable now. So I hope mod_ssl can stabilize now. The current code runs the test suite with 1.0.2 and with 1.1.0 without any ssl

Re: [Update] Support for OpenSSL 1.1.0

2016-02-14 Thread Rainer Jung
The nice people at OpenSSL have already committed the two patches (renegotiation with ECDHE ciphers, detecting HTTP-on-HTTPS) and I think I found an easy way to trigger renegotiation without polling (using SSL_peek). The current code runs the test suite with 1.0.2 and with 1.1.0 without any

[Update] Support for OpenSSL 1.1.0

2016-02-13 Thread Rainer Jung
I have send a candidate patch for the "talking http on https" patch to the OpenSSL project. Using this patch and another fix I applied to trunk for reneg handling in the proxy client case (mod_proxy talking https to a backend), I'm now down to one remaining test suite failure. More precisely