Skip to content

Commit cd72ae4

Browse files
committed
Merge r1929631 from trunk:
* modules/ssl/ssl_engine_kernel.c (ssl_check_vhost_sni_policy): Fix handling of STRICT mode. Reviewed by: jorton, rpluem, covener git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1929939 13f79535-47bb-0310-9956-ffa450edef68
1 parent 82c2aac commit cd72ae4

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/ssl/ssl_engine_kernel.c

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -115,8 +115,8 @@ static int ssl_check_vhost_sni_policy(SSLSrvConfigRec *sc1,
115115
return 1;
116116

117117
/* Policy: strict => fail for any vhost transition. */
118-
if (policy == MODSSL_SNIVH_STRICT && sc1 != sc2)
119-
return 0;
118+
if (policy == MODSSL_SNIVH_STRICT)
119+
return sc1 == sc2;
120120

121121
/* For authonly/secure policy, compare the hash. */
122122
AP_DEBUG_ASSERT(sc1->sni_policy_hash);

0 commit comments

Comments
 (0)