mirror of
https://github.com/apache/httpd.git
synced 2025-08-08 15:02:10 +03:00
* modules/ssl/ssl_engine_kernel.c (ssl_hook_ReadReq): For performing
TLS upgrade, require only the presence of a "TLS/1.0" token somewhere in the Upgrade request-header, rather than as the exact header value. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@600479 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
@@ -102,7 +102,7 @@ int ssl_hook_ReadReq(request_rec *r)
|
||||
* has sent a suitable Upgrade header. */
|
||||
if (sc->enabled == SSL_ENABLED_OPTIONAL && !myConnConfig(r->connection)
|
||||
&& (upgrade = apr_table_get(r->headers_in, "Upgrade")) != NULL
|
||||
&& strcmp(ap_getword(r->pool, &upgrade, ','), "TLS/1.0") == 0) {
|
||||
&& ap_find_token(r->pool, upgrade, "TLS/1.0")) {
|
||||
if (upgrade_connection(r)) {
|
||||
return HTTP_INTERNAL_SERVER_ERROR;
|
||||
}
|
||||
|
Reference in New Issue
Block a user