freebsd-ports/www/apache20/files
Clement Laforet 310abe64ef - Yet Another Security Fix
Fix CAN-2004-0885:

  * modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Ensure that a
  correct cipher suite has been negotiated, else deny access.

  * modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): With OpenSSL
  0.9.7, prevent session resumption during a renegotiation to force the
  client to negotiate a new (and acceptable) cipher suite.

Credits:	Hartmut Keil, Joe Orton
2004-10-13 09:17:38 +00:00
..
apache.sh - Add a sanity check on apache2 configuration files before reloading or 2004-08-23 15:44:51 +00:00
apache2libs.sh - Add ldconfig -m to apache2's apr libs (install time and boot time) 2004-08-05 21:46:17 +00:00
exp-apr-kqueue.patch - Update experimental apr/kqueue patch 2004-07-13 09:53:43 +00:00
exp-windowsupdate.patch - Update to 2.0.50 2004-07-01 05:54:56 +00:00
patch-configure.in - Make configure script define DEFAULT_SCOREBOARD. 2004-07-02 13:47:41 +00:00
patch-docs:conf:httpd-std.conf.in - Bump PORTREVISION for all previous changes 2004-08-17 12:41:26 +00:00
patch-docs:conf:ssl-std.conf.in
patch-Makefile.in
patch-modules:ssl:mod_ssl.h
patch-secfix-CAN-2004-0885 - Yet Another Security Fix 2004-10-13 09:17:38 +00:00
patch-server:main.c
patch-src:apr:build:buildcheck.sh - import buildconf patch in ports tree. 2004-05-18 11:58:56 +00:00
patch-srclib:apr-util:config.layout
patch-srclib:apr-util:misc:apr_reslist.c - Update to 2.0.50 2004-07-01 05:54:56 +00:00
patch-srclib:apr-util:xml:expat:buildconf.sh - import buildconf patch in ports tree. 2004-05-18 11:58:56 +00:00
patch-srclib:apr-utils:build:dbm.m4
patch-srclib:apr:buildconf - import buildconf patch in ports tree. 2004-05-18 11:58:56 +00:00
patch-srclib:apr:config.layout
patch-srclib:apr:threadproc:unix:procsup.c
patch-support:apachectl.in - Update to 2.0.52 2004-10-12 08:27:40 +00:00
patch-support:log_server_status.in