https://issues.apache.org/bugzilla/show_bug.cgi?id=56353

--- Comment #1 from Kaspar Brand <[email protected]> ---
Created attachment 31485
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=31485&action=edit
Reverse apr_array_append order with cfgMergeArray

(In reply to hanno from comment #0)
> When one defines a certificate in the global scope (outside any
> VirtualHost), all hosts deliver that certificate.

True, I can confirm (I realized this when looking into bug 56306).

Can you try the attached patch with 2.4.9 and let us know if it addresses your
issue?

> It gets even weirder when one adds certificate chains. They still get
> delivered by vhosts. So if I e.g. add a certificate chain to test2.local in
> this example, I'll get test1.crt with the chain defined in test2.local.

What version of OpenSSL are you using, and how exactly do you "add a
certificate chain" - with SSLCertificateChainFile, or by including it in the
file pointed to by SSLCertificateFile?

(Note that for an SNI setup, it doesn't make much sense to have global-level
SSLCertificate[Key]File settings - the default cert should simply go into the
first VirtualHost block.)

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to