1
0
mirror of https://github.com/apache/httpd.git synced 2025-08-08 15:02:10 +03:00

* modules/ssl/ssl_engine_kernel.c (ssl_hook_ReadReq): For performing

TLS upgrade, require only the presence of a "TLS/1.0" token
  somewhere in the Upgrade request-header, rather than as the exact
  header value.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@600479 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Joe Orton
2007-12-03 11:06:35 +00:00
parent ad857cdbdc
commit 17fb5e70f7

View File

@@ -102,7 +102,7 @@ int ssl_hook_ReadReq(request_rec *r)
* has sent a suitable Upgrade header. */ * has sent a suitable Upgrade header. */
if (sc->enabled == SSL_ENABLED_OPTIONAL && !myConnConfig(r->connection) if (sc->enabled == SSL_ENABLED_OPTIONAL && !myConnConfig(r->connection)
&& (upgrade = apr_table_get(r->headers_in, "Upgrade")) != NULL && (upgrade = apr_table_get(r->headers_in, "Upgrade")) != NULL
&& strcmp(ap_getword(r->pool, &upgrade, ','), "TLS/1.0") == 0) { && ap_find_token(r->pool, upgrade, "TLS/1.0")) {
if (upgrade_connection(r)) { if (upgrade_connection(r)) {
return HTTP_INTERNAL_SERVER_ERROR; return HTTP_INTERNAL_SERVER_ERROR;
} }