Justin Erenkrantz wrote:
On 6/20/06, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
I've defaulted this to be 'ON' so we get reports of problems.
I would prefer that we don't turn SSL factories on by default just
yet. (httpd doesn't enable mod_ssl either unless explicitly requested
too.)
FWIW, by bundling code that uses/links OpenSSL, we're likely going to
have to also follow httpd in providing BXA notifications - which may
means that all of our downstream APR-util users will have to file too
- oh joy! Garrett should check up with Roy on that. =) -- justin
See http://www.apache.org/dev/crypto.html for the fundementals, still evolving.