Correcting the documentation and the implementation.  The current 
implementation reads the potentially overridable 
proxy.config.ssl.client.verify.server in HttpSM, but throws that away and reads 
it again in SSLNetVConnection and uses the ssl_server_name value for the 
override instead.  So this commit removes the overrideable mechanics for the 
setting and updates the documentation to point to the ssl_server_name 
documentation instead.  

There was also a change in interpretation in the values for 
proxy.config.ssl.client.verify.server as the sni_server_name integration was 
done which caused the values for 2 and 1 to swap meetings.  This PR changes the 
logic back to the original meaning.  1 is enforcing and 2 is logging only on 
verification errors.

[ Full content available at: https://github.com/apache/trafficserver/pull/4207 ]
This message was relayed via gitbox.apache.org for [email protected]

Reply via email to