www/apache
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2025-08-08 15:02:10 +03:00
Code Activity

Set an error note for requests rejected due to SSLStrictSNIVHostCheck.

Browse Source 
This allows custom error documents to include the specific reason
for denying access to the server.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1609936 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Jeff Trawick
2014-07-12 14:48:04 +00:00
parent fe07b16cc2
commit 070d6672c9
2 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@@ -1,6 +1,9 @@
-*- coding: utf-8 -*- -*- coding: utf-8 -*-
Changes with Apache 2.5.0 Changes with Apache 2.5.0
*) mod_ssl: Set an error note for requests rejected due to
SSLStrictSNIVHostCheck. [Jeff Trawick]
*) mod_ssl: Fix issue with redirects to error documents when handling *) mod_ssl: Fix issue with redirects to error documents when handling
SNI errors. [Jeff Trawick] SNI errors. [Jeff Trawick]

4
modules/ssl/ssl_engine_kernel.c
View File

@@ -220,6 +220,10 @@ int ssl_hook_ReadReq(request_rec *r)
ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(02033) ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server, APLOGNO(02033)
"No hostname was provided via SNI for a name based" "No hostname was provided via SNI for a name based"
" virtual host"); " virtual host");
apr_table_setn(r->notes, "error-notes",
"Reason: The client software did not provide a "
"hostname using Server Name Indication (SNI), "
"which is required to access this server.<br />\n");
return HTTP_FORBIDDEN; return HTTP_FORBIDDEN;
} }
} }