Blame SOURCES/mod_nss-nssverifyclient.patch
|
 |
587326 |
diff -rupN mod_nss-1.0.8.patched/nss_engine_kernel.c mod_nss-1.0.8.989724/nss_engine_kernel.c
|
|
|
587326 |
--- mod_nss-1.0.8.patched/nss_engine_kernel.c 2007-05-31 14:36:03.000000000 -0700
|
|
|
587326 |
+++ mod_nss-1.0.8.989724/nss_engine_kernel.c 2013-10-25 13:32:47.000000000 -0700
|
|
|
587326 |
@@ -275,7 +275,7 @@ int nss_hook_Access(request_rec *r)
|
|
|
587326 |
|
|
|
587326 |
if (verify == SSL_CVERIFY_REQUIRE) {
|
|
|
587326 |
SSL_OptionSet(ssl, SSL_REQUEST_CERTIFICATE, PR_TRUE);
|
|
|
587326 |
- SSL_OptionSet(ssl, SSL_REQUIRE_CERTIFICATE, SSL_REQUIRE_NO_ERROR);
|
|
|
587326 |
+ SSL_OptionSet(ssl, SSL_REQUIRE_CERTIFICATE, SSL_REQUIRE_ALWAYS);
|
|
|
587326 |
} else if (verify == SSL_CVERIFY_OPTIONAL) {
|
|
|
587326 |
SSL_OptionSet(ssl, SSL_REQUEST_CERTIFICATE, PR_TRUE);
|
|
|
587326 |
SSL_OptionSet(ssl, SSL_REQUIRE_CERTIFICATE, SSL_REQUIRE_NEVER);
|