ASF Bugzilla – Attachment 36589 Details for
Bug 63430
proxy client certificates not found despite being configured in <proxy> section
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
Preserve sslconn->dc besides ssl_engine_set() calls
PR-63430.patch (text/plain), 1.07 KB, created by
Yann Ylavic
on 2019-05-15 20:35:25 UTC
(
hide
)
Description:
Preserve sslconn->dc besides ssl_engine_set() calls
Filename:
MIME Type:
Creator:
Yann Ylavic
Created:
2019-05-15 20:35:25 UTC
Size:
1.07 KB
patch
obsolete
>Index: modules/ssl/mod_ssl.c >=================================================================== >--- modules/ssl/mod_ssl.c (revision 1859292) >+++ modules/ssl/mod_ssl.c (working copy) >@@ -448,10 +448,20 @@ static SSLConnRec *ssl_init_connection_ctx(conn_re > SSLConnRec *sslconn = myConnConfig(c); > int need_setup = 0; > >+ /* mod_proxy's (r->)per_dir_config has the lifetime of the request, thus >+ * it uses ssl_engine_set() to reset sslconn->dc when reusing SSL backend >+ * connections, so we must fall through here. But in the case where we are >+ * called from ssl_init_ssl_connection() with no per_dir_config (which also >+ * includes mod_proxy's later run_pre_connection call), sslconn->dc should >+ * be preserved if it's already set. >+ */ > if (!sslconn) { > sslconn = apr_pcalloc(c->pool, sizeof(*sslconn)); > need_setup = 1; > } >+ else if (!new_proxy) { >+ return sslconn; >+ } > > /* Reinit dc in any case because it may be r->per_dir_config scoped > * and thus a caller like mod_proxy needs to update it per request.
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 63430
:
36585
| 36589