Bug 50998

Summary: Docs for SSLCipherSuite incorrect
Product: Apache httpd-2 Reporter: Simon Elén <apache>
Component: DocumentationAssignee: HTTP Server Documentation List <docs>
Status: RESOLVED FIXED    
Severity: normal CC: DRuggeri
Priority: P2    
Version: 2.2.17   
Target Milestone: ---   
Hardware: PC   
OS: Windows XP   

Description Simon Elén 2011-03-30 13:03:01 UTC 
http://httpd.apache.org/docs/trunk/mod/mod_ssl.html#sslciphersuite
>Available prefixes are:
>none: add cipher to list
>+: add ciphers to list and pull them to current location in list

http://www.openssl.org/docs/apps/ciphers.html
>If + is used then the ciphers are moved to the end of the list. This option doesn't add any new ciphers it just moves matching existing ones. 
>If none of these characters is present then the string is just interpreted as a list of ciphers to be appended to the current preference list. If the list includes any ciphers already present they will be ignored: that is they will not moved to the end of the list.

What actually happens seems to match the OpenSSL documentation and not the Apache documentation.
Comment 1 Daniel Ruggeri 2012-03-31 00:59:19 UTC 
Confirmed - trunk patch applied in r1307670.
Comment 2 Daniel Ruggeri 2012-03-31 05:34:06 UTC 
Corrected in...
2.4 => r1307699
2.2 => r1307698
2.0 => r1307700
trunk => r1307670