https://issues.apache.org/bugzilla/show_bug.cgi?id=53952

Marcel Šebek <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #29433|0                           |1
        is obsolete|                            |

--- Comment #9 from Marcel Šebek <[email protected]> ---
Created attachment 29459
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=29459&action=edit
patch for tomcat trunk that adds support for newer TLS versions

Ok, I agree with your comments, and I've reworked the patches.

In the tcnative part, it should be sufficient to move ifdefs inside the if
blocks. When newer TLS versions are not available, the variable ctx remains
null, and an error is emitted.

In the tomcat part, I rely on the SSL.hasOp functionality to check whether the
tcnative library supports newer protocols. I needed to change both AprEndpoint
and AprSocketContext, which resulted in some code duplication. I think the ssl
protocol parsing should be implemented in one place only. Now AprSocketContext
doesn't support more protocols (via +), and it produces no error when the
string is invalid.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to