https://issues.apache.org/bugzilla/show_bug.cgi?id=53952
Marcel Šebek <sebe...@post.cz> changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #29433|0 |1
is obsolete| |
--- Comment #9 from Marcel Šebek <sebe...@post.cz> ---
Created attachment 29459
--> https://issues.apache.org/bugzilla/attachment.cgi?id=29459&action=edit
patch for tomcat trunk that adds support for newer TLS versions
Ok, I agree with your comments, and I've reworked the patches.
In the tcnative part, it should be sufficient to move ifdefs inside the if
blocks. When newer TLS versions are not available, the variable ctx remains
null, and an error is emitted.
In the tomcat part, I rely on the SSL.hasOp functionality to check whether the
tcnative library supports newer protocols. I needed to change both AprEndpoint
and AprSocketContext, which resulted in some code duplication. I think the ssl
protocol parsing should be implemented in one place only. Now AprSocketContext
doesn't support more protocols (via +), and it produces no error when the
string is invalid.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
