mirror of
https://github.com/apache/httpd.git
synced 2025-08-08 15:02:10 +03:00
proxy needs to use client ssl method
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@94282 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
@@ -407,6 +407,7 @@ static void ssl_init_ctx(server_rec *s,
|
|||||||
modssl_ctx_t *mctx)
|
modssl_ctx_t *mctx)
|
||||||
{
|
{
|
||||||
SSL_CTX *ctx = NULL;
|
SSL_CTX *ctx = NULL;
|
||||||
|
SSL_METHOD *method = NULL;
|
||||||
char *cp;
|
char *cp;
|
||||||
int protocol = mctx->protocol;
|
int protocol = mctx->protocol;
|
||||||
|
|
||||||
@@ -430,10 +431,16 @@ static void ssl_init_ctx(server_rec *s,
|
|||||||
"Creating new SSL context (protocols: %s)", cp);
|
"Creating new SSL context (protocols: %s)", cp);
|
||||||
|
|
||||||
if (protocol == SSL_PROTOCOL_SSLV2) {
|
if (protocol == SSL_PROTOCOL_SSLV2) {
|
||||||
ctx = SSL_CTX_new(SSLv2_server_method()); /* only SSLv2 is left */
|
method = mctx->pkp ?
|
||||||
|
SSLv2_client_method() : /* proxy */
|
||||||
|
SSLv2_server_method(); /* server */
|
||||||
|
ctx = SSL_CTX_new(method); /* only SSLv2 is left */
|
||||||
}
|
}
|
||||||
else {
|
else {
|
||||||
ctx = SSL_CTX_new(SSLv23_server_method()); /* be more flexible */
|
method = mctx->pkp ?
|
||||||
|
SSLv23_client_method() : /* proxy */
|
||||||
|
SSLv23_server_method(); /* server */
|
||||||
|
ctx = SSL_CTX_new(method); /* be more flexible */
|
||||||
}
|
}
|
||||||
|
|
||||||
mctx->ssl_ctx = ctx;
|
mctx->ssl_ctx = ctx;
|
||||||
|
Reference in New Issue
Block a user