1
0
mirror of https://github.com/apache/httpd.git synced 2025-08-08 15:02:10 +03:00

proxy needs to use client ssl method

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94282 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Doug MacEachern
2002-03-29 02:06:57 +00:00
parent ea4cfaae7c
commit 192828c57c

View File

@@ -407,6 +407,7 @@ static void ssl_init_ctx(server_rec *s,
modssl_ctx_t *mctx) modssl_ctx_t *mctx)
{ {
SSL_CTX *ctx = NULL; SSL_CTX *ctx = NULL;
SSL_METHOD *method = NULL;
char *cp; char *cp;
int protocol = mctx->protocol; int protocol = mctx->protocol;
@@ -430,10 +431,16 @@ static void ssl_init_ctx(server_rec *s,
"Creating new SSL context (protocols: %s)", cp); "Creating new SSL context (protocols: %s)", cp);
if (protocol == SSL_PROTOCOL_SSLV2) { if (protocol == SSL_PROTOCOL_SSLV2) {
ctx = SSL_CTX_new(SSLv2_server_method()); /* only SSLv2 is left */ method = mctx->pkp ?
SSLv2_client_method() : /* proxy */
SSLv2_server_method(); /* server */
ctx = SSL_CTX_new(method); /* only SSLv2 is left */
} }
else { else {
ctx = SSL_CTX_new(SSLv23_server_method()); /* be more flexible */ method = mctx->pkp ?
SSLv23_client_method() : /* proxy */
SSLv23_server_method(); /* server */
ctx = SSL_CTX_new(method); /* be more flexible */
} }
mctx->ssl_ctx = ctx; mctx->ssl_ctx = ctx;