Re: CipherLists and who has control: aka what to do re: renegotiate - a simple way to set minimum levels in "core"?

2015-07-19 Thread Michael Felt
On 2015-07-18 6:12 PM, William A Rowe Jr wrote: This was addressed for 2.2.31 and 2.4.16... See the significantly revised default docs/conf/extra/httpd-ssl.conf.in template for our recommended config. I am "behind the times" obviously here. I have some regular work to do, but I shall try adopti

Re: Using UPN from subjectAltName with SSLUserName

2015-07-19 Thread Kaspar Brand
On 13.07.2015 16:03, Joe Orton wrote: > On Sat, Jul 11, 2015 at 04:40:20PM +0200, Kaspar Brand wrote: >> @@ -1902,5 +1907,7 @@ apr_status_t ssl_init_ModuleKill(void *data) >> >> free_dh_params(); >> >> +OBJ_cleanup(); >> + >> return APR_SUCCESS; > > From being burnt previously th

Re: Supporting non-TCP/IP transports

2015-07-19 Thread Mikhail T.
On 18.07.2015 15:43, Kean Johnston wrote: > On 7/18/2015 9:25 PM, Phil Lello wrote: >> - UNIX-domain sockets > I personally think this could be very useful. "Me too". In particular, it is fairly common these days for Varnish-proxy to run on the same server as the actual Apache. Having the two commu

Bug report for Apache httpd-2 [2015/07/19]

2015-07-19 Thread bugzilla
+---+ | Bugzilla Bug ID | | +-+ | | Status: UNC=Unconfirmed NEW=New ASS=Assigned