kpriv/freebsd-ports
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

- Fix CAN-2005-2700

Browse source 
* modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Ensure that
renegotiation is performed for a transition from "SSLVerifyClient
optional" to "SSLVerifyClient require".
This commit is contained in:
Clement Laforet 2005-09-07 20:31:12 +00:00
parent c04ae9a466
commit 682f1eab30
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=142187
2 changed files with 15 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
www/apache2/Makefile
View file

@ -9,7 +9,7 @@
PORTNAME= apache
PORTVERSION= 2.0.54
PORTREVISION= 3
PORTREVISION= 4
CATEGORIES= www
MASTER_SITES= ${MASTER_SITE_APACHE_HTTPD} \
${MASTER_SITE_LOCAL:S/%SUBDIR%/clement/}:powerlogo

14
www/apache2/files/patch-secfix-CAN-2005-2700 Normal file
View file

@ -0,0 +1,14 @@
--- modules/ssl/ssl_engine_kernel.c 2005/08/30 15:54:34 264799
+++ modules/ssl/ssl_engine_kernel.c 2005/08/30
15:57:38 264800
@@ -406,8 +406,8 @@
(!(verify_old & SSL_VERIFY_PEER) &&
(verify & SSL_VERIFY_PEER)) ||
- (!(verify_old & SSL_VERIFY_PEER_STRICT) &&
- (verify & SSL_VERIFY_PEER_STRICT)))
+ (!(verify_old & SSL_VERIFY_FAIL_IF_NO_PEER_CERT) &&
+ (verify & SSL_VERIFY_FAIL_IF_NO_PEER_CERT)))
{
renegotiate = TRUE;
/* optimization */