Just pulling up some commits: mod_ssl: Correctly merge configurations that have client certificates… https://github.com/apache/httpd/commit/c4db6aaf8eabc2cc9849900b08ba4ccd2228da12
mod_ssl: We need to get the SSL_CTX for further processing https://github.com/apache/httpd/commit/5b0b68bdfd5a9ac5def45402723d32c5bd39cd8f Maybe interesting: Disable AUTO_RETRY mode for OpenSSL 1.1.1, which fixes post-handshake authentication. https://github.com/apache/httpd/commit/bbedd8b80e50647e09f2937455cc57565d94a844 Fail with 403 if SSL_verify_client_post_handshake() fails, e.g. when the TLS/1.3 client didn't send the Post-Handshake Authentication extension. https://github.com/apache/httpd/commit/557b8d1769dc4a207641d313e20fc3e68fd4705d The big one, but more about TLSv1.3 than openssl 1.1.1 mod_ssl: add experimental support for TLSv1.3 https://github.com/apache/httpd/commit/d5943f3e6a0fba6aada7cb90ab6a7f42081be308 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1803689 Title: Login with client cert times out To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1803689/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
