summaryrefslogtreecommitdiff
path: root/modules/ssl/mod_ssl.c
diff options
context:
space:
mode:
authorStefan Fritsch <sf@sfritsch.de>2015-10-24 10:34:40 +0200
committerStefan Fritsch <sf@sfritsch.de>2015-10-24 10:34:40 +0200
commitf775596dea7222b55efc18005acf1919609c3602 (patch)
tree9a0937e781142c443fe1331a39dac5d5f91fb74e /modules/ssl/mod_ssl.c
parent48802c25dc82a8b13ac351c0c2137ef748256bbd (diff)
downloadapache2-f775596dea7222b55efc18005acf1919609c3602.tar.gz
Imported Upstream version 2.4.17
Diffstat (limited to 'modules/ssl/mod_ssl.c')
-rw-r--r--modules/ssl/mod_ssl.c16
1 files changed, 13 insertions, 3 deletions
diff --git a/modules/ssl/mod_ssl.c b/modules/ssl/mod_ssl.c
index 7e1c431d..41d7f9f7 100644
--- a/modules/ssl/mod_ssl.c
+++ b/modules/ssl/mod_ssl.c
@@ -125,10 +125,15 @@ static const command_rec ssl_config_cmds[] = {
SSL_CMD_SRV(SessionCacheTimeout, TAKE1,
"SSL Session Cache object lifetime "
"('N' - number of seconds)")
+#ifdef OPENSSL_NO_SSL3
+#define SSLv3_PROTO_PREFIX ""
+#else
+#define SSLv3_PROTO_PREFIX "SSLv3|"
+#endif
#ifdef HAVE_TLSV1_X
-#define SSL_PROTOCOLS "SSLv3|TLSv1|TLSv1.1|TLSv1.2"
+#define SSL_PROTOCOLS SSLv3_PROTO_PREFIX "TLSv1|TLSv1.1|TLSv1.2"
#else
-#define SSL_PROTOCOLS "SSLv3|TLSv1"
+#define SSL_PROTOCOLS SSLv3_PROTO_PREFIX "TLSv1"
#endif
SSL_CMD_SRV(Protocol, RAW_ARGS,
"Enable or disable various SSL protocols "
@@ -340,6 +345,11 @@ static int ssl_hook_pre_config(apr_pool_t *pconf,
OpenSSL_add_all_algorithms();
OPENSSL_load_builtin_modules();
+ if (OBJ_txt2nid("id-on-dnsSRV") == NID_undef) {
+ (void)OBJ_create("1.3.6.1.5.5.7.8.7", "id-on-dnsSRV",
+ "SRVName otherName form");
+ }
+
/*
* Let us cleanup the ssl library when the module is unloaded
*/
@@ -480,7 +490,7 @@ int ssl_init_ssl_connection(conn_rec *c, request_rec *r)
}
SSL_set_app_data(ssl, c);
- SSL_set_app_data2(ssl, NULL); /* will be request_rec */
+ modssl_set_app_data2(ssl, NULL); /* will be request_rec */
sslconn->ssl = ssl;