Re: svn commit: r1703871 - /httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c

[Yann Ylavic]

On Fri, Sep 18, 2015 at 4:31 PM,  <yla...@apache.org> wrote:
> Author: ylavic
> Date: Fri Sep 18 14:31:48 2015
> New Revision: 1703871
>
> URL: http://svn.apache.org/viewvc?rev=1703871&view=rev
> Log:
> mod_ssl: update the current handshake server once a full regenegotation
> succeeds, it is the new reference for further renegotiation or SNI check.
>
> Modified:
>     httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c
>
> Modified: httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c
> URL: 
> http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c?rev=1703871&r1=1703870&r2=1703871&view=diff
> ==============================================================================
> --- httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c (original)
> +++ httpd/httpd/trunk/modules/ssl/ssl_engine_kernel.c Fri Sep 18 14:31:48 2015
> @@ -850,6 +850,11 @@ int ssl_hook_Access(request_rec *r)
>                  r->connection->keepalive = AP_CONN_CLOSE;
>                  return HTTP_FORBIDDEN;
>              }
> +
> +            /* Full renegotiation successfull, we now have handshaken with
> +             * this server's parameters.
> +             */
> +            sslconn->server = r->server;
>          }
>
>          /*
>
>

This one may be needed in 2.4.17-protocols-http2 too...