DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUGĀ·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=43708>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED ANDĀ·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=43708

           Summary: mod_ssl version string corrupted
           Product: Apache httpd-2
           Version: 2.2.6
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_ssl
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


I built httpd-2.2.6 on fc5 with openssl 0.9.8e and g. On both versions the
Server identification in HTTP responses got corrupted.

eg:
Server: Apache/2.2.6 (Unix) mod_ssl/2.2.6 . mod_fastcgi/2.4.2
instead of:
Server: Apache/2.2.6 (Unix) mod_ssl/2.2.6 OpenSSL/0.9.8g mod_fastcgi/2.4.2

it was ok with 2.2.4.

I did some research and found that changing...
--------------
--- ssl_engine_vars.c.orig      2007-10-26 17:32:40.000000000 +0200
+++ ssl_engine_vars.c   2007-10-26 17:02:38.000000000 +0200
@@ -637,7 +637,7 @@
 {
     static char interface[] = "mod_ssl/" MOD_SSL_VERSION;
     static char library_interface[] = SSL_LIBRARY_TEXT;
-    static char *library = NULL;
+    char *library = NULL;
     char *result;

     if (!library) {
----------
...helps. it seems that the string returned in
   library = apr_pstrdup(p, SSL_LIBRARY_DYNTEXT);
some lines later gets overwritten somehow.

Regards, Wolfgang Breyha

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to