Re: svn commit: r1915740 - in /httpd/httpd/branches/2.4.x: ./ changes-entries/pr61574.txt modules/ssl/ssl_engine_init.c

2024-02-20 Thread Joe Orton
On Fri, Feb 16, 2024 at 09:52:04PM +0100, Christophe JAILLET wrote:
> Le 12/02/2024 à 09:37, jor...@apache.org a écrit :
> > Author: jorton
> > Date: Mon Feb 12 08:37:35 2024
> > New Revision: 1915740
> > 
> > URL: http://svn.apache.org/viewvc?rev=1915740=rev
> > Log:
...
> r1825124 was a follow-up of this patch.
> Should it be backported as well?

Good catch, thank you. Proposed now.

Regards, Joe



Re: svn commit: r1915740 - in /httpd/httpd/branches/2.4.x: ./ changes-entries/pr61574.txt modules/ssl/ssl_engine_init.c

2024-02-16 Thread Christophe JAILLET

Le 12/02/2024 à 09:37, jor...@apache.org a écrit :

Author: jorton
Date: Mon Feb 12 08:37:35 2024
New Revision: 1915740

URL: http://svn.apache.org/viewvc?rev=1915740=rev
Log:
Merge r1825120 from trunk:

* modules/ssl/ssl_engine_init.c (ssl_init_PushCAList): Remove function.
   (ssl_init_ca_cert_path): Use SSL_add_file_cert_subjects_to_stack()
   instead.

[Edit: This does change behaviour: the acceptable client CA list is now
  always be sent in sorted order rather than configured/file order.
  In the case of SSLCACertificatePath and SSLCADNRequestPath, the
  order will be stable rather than non-determistic as previously.]

PR: 61574
Github: closes #406
Reviewed by: jorton, jfclere, covener

Added:
 httpd/httpd/branches/2.4.x/changes-entries/pr61574.txt
Modified:
 httpd/httpd/branches/2.4.x/   (props changed)
 httpd/httpd/branches/2.4.x/modules/ssl/ssl_engine_init.c

Propchange: httpd/httpd/branches/2.4.x/
--
   Merged /httpd/httpd/trunk:r1825120



r1825124 was a follow-up of this patch.
Should it be backported as well?

CJ