www/apache
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2025-08-01 07:26:57 +03:00
Code Activity

force OpenSSL to ignore process local-caching and to always

Browse Source 
get/set/delete sessions using mod_ssl's callbacks
PR:
Obtained from:
Submitted by:   Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>
Reviewed by:    dougm


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@90654 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Doug MacEachern
2001-08-24 23:25:14 +00:00
parent 97b39c091b
commit 3ffec6690a
2 changed files with 18 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES
View File

@ -1,5 +1,10 @@
Changes with Apache 2.0.25-dev Changes with Apache 2.0.25-dev
*) force OpenSSL to ignore process local-caching and to always
get/set/delete sessions using mod_ssl's callbacks
[Madhusudan Mathihalli <madhusudan_mathihalli@hp.com>,
Geoff Thorpe <geoff@geoffthorpe.net>]
*) Make the worker MPM shutdown and restart cleanly. This also *) Make the worker MPM shutdown and restart cleanly. This also
cleans up some race conditions, and gets the worker using cleans up some race conditions, and gets the worker using
pools more cleanly. [Aaron Bannert <aaron@clove.org>] pools more cleanly. [Aaron Bannert <aaron@clove.org>]

17
modules/ssl/ssl_engine_init.c
View File

@ -468,6 +468,7 @@ void ssl_init_ConfigureServer(server_rec *s, apr_pool_t *p, SSLSrvConfigRec *sc)
BOOL bSkipFirst; BOOL bSkipFirst;
int isca, pathlen; int isca, pathlen;
int i, n; int i, n;
long cache_mode;
/* /*
* Create the server host:port string because we need it a lot * Create the server host:port string because we need it a lot
@ -529,10 +530,18 @@ void ssl_init_ConfigureServer(server_rec *s, apr_pool_t *p, SSLSrvConfigRec *sc)
* Configure additional context ingredients * Configure additional context ingredients
*/ */
SSL_CTX_set_options(ctx, SSL_OP_SINGLE_DH_USE); SSL_CTX_set_options(ctx, SSL_OP_SINGLE_DH_USE);
if (mc->nSessionCacheMode == SSL_SCMODE_NONE) if (mc->nSessionCacheMode == SSL_SCMODE_NONE) {
SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_OFF); cache_mode = SSL_SESS_CACHE_OFF;
else }
SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_SERVER); else {
/* SSL_SESS_CACHE_NO_INTERNAL_LOOKUP will force OpenSSL
* to ignore process local-caching and
* to always get/set/delete sessions using mod_ssl's callbacks.
*/
cache_mode = SSL_SESS_CACHE_SERVER|SSL_SESS_CACHE_NO_INTERNAL_LOOKUP;
}
SSL_CTX_set_session_cache_mode(ctx, cache_mode);
/* /*
* Configure callbacks for SSL context * Configure callbacks for SSL context