CVS log for ports/www/apache2/files/Attic/patch-secfix-CAN-2004-0885
Up to [FreeBSD] / ports / www / apache2 / files
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
Revision 1.2
Tue Feb 8 15:17:06 2005 UTC (7 years ago) by clement
Branches: MAIN
CVS tags: HEAD
FILE REMOVED
Changes since revision 1.1: +0 -0 lines
- Update to 2.0.53 - Download bz2'd tarball [1] - Add print-closest-mirrors target. It allows you to find the 6 (3 http/3 ftp) closest mirror, base on http://www.apache.org/dyn/closer.cgi/httpd/ make print-closest-mirrors >> /etc/make.conf automatically add the six closest mirror to the head of ${MASTER_SITE_APACHE_HTTPD}. Requested by: delphij
Revision 1.1: download - view: text, markup, annotated - select for diffs
Wed Oct 13 09:17:38 2004 UTC (7 years, 3 months ago) by clement
Branches: MAIN
CVS tags: RELEASE_4_11_0
- Yet Another Security Fix Fix CAN-2004-0885: * modules/ssl/ssl_engine_kernel.c (ssl_hook_Access): Ensure that a correct cipher suite has been negotiated, else deny access. * modules/ssl/ssl_engine_init.c (ssl_init_ctx_protocol): With OpenSSL 0.9.7, prevent session resumption during a renegotiation to force the client to negotiate a new (and acceptable) cipher suite. Credits: Hartmut Keil, Joe Orton
