https://bz.apache.org/bugzilla/show_bug.cgi?id=65900
Bug ID: 65900
Summary: SSL still enabled without SSLEngine
Product: Apache httpd-2
Version: 2.4.52
Hardware: PC
OS: Linux
Status: NEW
Severity: minor
Priority: P2
Component: mod_ssl
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
Had a barebones setup with a single conf file where the only 4 references to
SSL were:
1. The LoadModule for mod_ssl.
2. Listen 443 https
3. Certificate and key specified inside a single vhost.
The "SSLEngine on" directive was removed completely and the server restarted.
After the restart, tried to access a file via HTTPS and could see the handshake
occur and a successful file retrieval via HTTPS.
Same setup on Windows using an Apache Lounge build on the same version seems to
partially work (although the error log indicates a bad request).
The documentation for SSLEngine indicates the default value is "SSLEngine off"
and the documentation for the other 3 related directives do not indicate that
they enable the SSL engine.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
