On Mon, Jun 18, 2008 at 05:27:17PM +0200, I wrote:
So, to support non-SNI clients as far as possible, let me propose the
attached (additional) patch. It corrects the shortcomings of my earlier
attempt (no longer changing dc-nVerify{Client,Depth} in-place), and
includes the changes to support
Coincidentally, I was about to finish the second part of my analysis
when I saw the SNI in which release? message earlier today.
So here it is, part two... Joe, your help in getting SNI into 2.2.10
(possibly) would be very much appreciated. Thanks if you find time for
looking into this.
We're
Joe Orton wrote:
A lot of the mod_ssl code will need to be
very carefully reviewed since some core assumptions are being broken by
supporting SNI. I would go through each of the config directive which
supports vhost context in turn.
So, as promised, I've looked further into it, based on
Joe Orton wrote:
Access control is certainly the most important issue, but e.g. if
SSLCertificateChainFile is not supported properly for the named vhost
that's also a bug. Many configs depend on supplying the intermediate
certs.
True. I'm using such a configuration on my test host since
[EMAIL PROTECTED] wrote:
SNI in 2.2.9? (Re: 2.2.9 status)
61495 by: Kaspar Brand
There are just a handful of useful patches in STATUS lacking
a single vote for inclusion in 2.2.9...
While not completely true for the SNI backport proposal (requires more
than a single additional vote
On Tue, Jun 03, 2008 at 04:42:07PM +0200, Kaspar Brand wrote:
So, is there still hope for SNI being added in 2.2.9...? Let me know if
there's anything else I can do to increase the chances of getting this
proposal accepted.
http://svn.apache.org/viewvc?rev=662815view=rev
Changing the dirconf
Den Wednesday 04 June 2008 14:06:22 skrev Ian G:
[EMAIL PROTECTED] wrote:
SNI in 2.2.9? (Re: 2.2.9 status)
61495 by: Kaspar Brand
FYI. SNI is in Mandriva Linux 2008.1.
--
Regards // Oden Eriksson
Oden Eriksson wrote:
Den Wednesday 04 June 2008 14:06:22 skrev Ian G:
[EMAIL PROTECTED] wrote:
SNI in 2.2.9? (Re: 2.2.9 status)
61495 by: Kaspar Brand
FYI. SNI is in Mandriva Linux 2008.1.
Then you should pull it out ASAP, as noted by others the patch currently
in trunk is broken
Joe Orton wrote:
http://svn.apache.org/viewvc?rev=662815view=rev
Changing the dirconf structure fields in-place seems ugly and may even
be thread-unsafe (not sure).
Thanks for pointing this out, I wasn't aware of the danger of doing so.
The same effect can be achieved with the attached,
