On Tue, Nov 5, 2019 at 9:19 AM Rüdiger Plüm <[email protected]> wrote: > > On 10/28/2019 10:54 AM, Yann Ylavic wrote: > > > > Once/if backported, I plan to completely remove the base vhost from > > the game, in trunk (usual merging applies). > > So you want to revert r1868929 after the backport?
Yes, exactly. > > As far as I can tell r1868929 keeps the inheritance behavior closer to the > previous 2.4.x and trunk behavior, but is different compared to the > inheritance behavior of already SNI respecting directives like e.g. > SSLCipherSuite. > Removing r1868929 would bring both (the directives respecting SNI so far > and the ones that NOW respect SNI) to the same inheritance level, correct? That's it, and consistent with all other RSRC_CONF directives merging. The difference between 2.4 (with r1868929) and trunk (without) would be only if no global SSLProtocol is configured. In this case any vhost with no SSLProtocol either would take the default value (the hard coded "ALL -SSLv3" currently), instead of first name based vhost's (which wouldn't be involved anymore for SSLProtocol). Sounds good? Thanks, Yann.
