CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/08/31 23:22:00
Modified files:
usr.sbin/httpd : server.c
Log message:
httpd: reject shared TLS listeners with different client CA or CRL
Virtual hosts on the same address and port share one TLS context, and
only the first hosts client CA and CRL are used. A client certificate
accepted there reaches every host on the listener, including one meant
to be restricted to a different CA. Such a configuration is now rejected
instead of silently ignored.
Bug report and diff by Acts1631
OK kirill@ claudio@
