Re: Bug handling Upgrade: TLS/1.0 header in ssl_engine_io.c

2005-03-10 Thread Joel J. Smith
Joe Orton wrote: On Tue, Mar 08, 2005 at 08:54:52PM -0700, Joel J Smith wrote: Hi httpd folks, It seems that Joe Orton introduced a bug while updating ssl_engine_io.c between version 109499 and version 59. The same bug was introduced into NetWare's mod_nw_ssl.c version 111327. (Please forgive

More on TLS Upgrade: Should httpd enforce good client behavior?

2005-03-10 Thread Joel J. Smith
There are two more issues that I would like to address on the TLS Upgrade feature. 1. RFC 2817 explicitly states that if the request comes in from an HTTP/1.0 (or earlier) client that the Upgrade header should be removed/ignored since: (a) there is no provision for Connection: Upgrade until

Bug handling Upgrade: TLS/1.0 header in ssl_engine_io.c

2005-03-08 Thread Joel J Smith
Hi httpd folks, It seems that Joe Orton introduced a bug while updating ssl_engine_io.c between version 109499 and version 59. The same bug was introduced into NetWare's mod_nw_ssl.c version 111327. (Please forgive me if that's not the correct way to reference svn version numbers... I'm new