Bug 114610

Summary:	apache ssl client authentication patch 12355
Product:	Gentoo Linux	Reporter:	Daniel Schröder <sec>
Component:	[OLD] Server	Assignee:	Apache Team - Bugzilla Reports <apache-bugs>
Status:	RESOLVED FIXED
Severity:	minor	CC:	gentoo, lbalan791
Priority:	High	Keywords:	InVCS
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://issues.apache.org/bugzilla/show_bug.cgi?id=12355
Whiteboard:
Package list:		Runtime testing required:	---

Description Daniel Schröder 2005-12-06 04:05:23 UTC

there is a bug in apache which is fixed by the apache dev guys...bug number
12355.  pls insert this patch in the gentoo apache patchset!

Reproducible: Always
Steps to Reproduce:
1. configure apache for ssl client cert authentication
2. go to the website, authenticate
3. surf along a page which uses POST you get the error

Actual Results:  
Error message by apache appears in Browser and in Apache Server logs.
Apache Server logs:[Thu Dec 01 13:09:11 2005] [error] SSL Re-negotiation in
conjunction with POST method not supported! hint: try SSLOptions +OptRenegotiate
In Browser appears: Method POST not supported


Expected Results:  
option +OptRenegotiate should be used

this missing patch is a show stopper in our production environment!
Plz. put this patch as soon as possible in portage.

thanks in advance

Comment 1 Daniel Schröder 2005-12-06 07:50:34 UTC

this Patch file applied to the vanilla 2.0.55 source is sufficient:
http://issues.apache.org/bugzilla/attachment.cgi?id=16495 to solve the bug

Comment 2 Jakub Moc (RETIRED) gentoo-dev

2006-05-03 11:52:30 UTC

*** Bug 132153 has been marked as a duplicate of this bug. ***

Comment 3 Jakub Moc (RETIRED) gentoo-dev

2007-02-03 10:33:25 UTC

*** Bug 123931 has been marked as a duplicate of this bug. ***

Comment 4 Christian Heim (RETIRED) gentoo-dev

2007-05-23 18:09:56 UTC

Should be in the tree (or at least be fixed w/ apache-2.2.4)