ASF Bugzilla – Attachment 36434 Details for
Bug 63171
SSLProxy: SSLOCSPResponderCertificateFile not loaded on HTTP to HTTPS proxy
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Patch against tag 2.4.38
ocsp-certificates.patch (text/plain), 1.04 KB, created by
Anton Tieleman
on 2019-02-13 10:33:38 UTC
(
hide
)
Description:
Patch against tag 2.4.38
Filename:
MIME Type:
Creator:
Anton Tieleman
Created:
2019-02-13 10:33:38 UTC
Size:
1.04 KB
patch
obsolete
>Index: modules/ssl/ssl_engine_init.c >IDEA additional info: >Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP ><+>UTF-8 >=================================================================== >--- modules/ssl/ssl_engine_init.c (revision 1853354) >+++ modules/ssl/ssl_engine_init.c (date 1549576493000) >@@ -1896,12 +1896,6 @@ > != APR_SUCCESS) { > return rv; > } >- >- /* Initialize OCSP Responder certificate if OCSP enabled */ >- #ifndef OPENSSL_NO_OCSP >- ssl_init_ocsp_certificates(s, sc->server); >- #endif >- > } > > sdc->proxy->sc = sc; >@@ -1916,6 +1910,16 @@ > } > sdc->proxy_post_config = 1; > >+ /* >+ * Initialize OCSP Responder certificate if OCSP enabled >+ * On a HTTP to HTTPS proxy, SSL can be disabled while OCSP certificates still need to be loaded >+ */ >+#ifndef OPENSSL_NO_OCSP >+ if ((sc->enabled == SSL_ENABLED_TRUE) || (sc->enabled == SSL_ENABLED_OPTIONAL) || (sdc->proxy_enabled == TRUE)) { >+ ssl_init_ocsp_certificates(s, sc->server); >+ } >+#endif >+ > return APR_SUCCESS; > } >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 63171
: 36434 |
36435