Comments (3)
Upstream has multiple meanings. There is obviously the upstream Apache HTTP Server project, but we also consider Fedora an upstream, because they take care of the hard work of fitting upstream software into the RPM-ecosystem (hence why we typically fork our initial spec files from Fedora). That said, we often have to diverge from one or both upstreams in order to fit software into the EL environment (libraries, init systems, openssl ciphers, etc). It is a balancing act.
I'm leaning towards following Fedora's lead on this and disabling SSLv3 by default (which they did because Apache upstream did it), but I wanted to open the public discussion for anyone to bring up concerns I haven't thought of.
from httpd24u.
According to https://github.com/apache/httpd/blob/2.4.20/docs/conf/extra/httpd-ssl.conf.in#L79 it should be done already.
Why are we changes the default configs at all? Shouldn't this be Inline With Upstream?
from httpd24u.
Fixed in #15, will be released as 2.4.25-4.
from httpd24u.
Related Issues (20)
- Build with mod_brotli HOT 7
- autoindex.conf deployed when mod_autoindex is disabled HOT 2
- Security release 2.4.39 HOT 6
- httpd24u missing libnghttp2 dependency HOT 2
- upstream 2.4.41 for el6 HOT 1
- Revisit building mod_md HOT 1
- Security release 2.4.43 HOT 16
- Is it possible to enable TLSv1.3 currently HOT 7
- Update to 2.4.46 For security Issues HOT 4
- Update to 2.4.48 for security issues, bugs and improvements HOT 9
- Update to 2.4.50 for security issues, bugs and improvements HOT 9
- Update to 2.50 for CVEs HOT 4
- Update to 2.4.52 for security issues, bugs and improvements
- Missing httpd24u 2.4.52 release in main ius repository HOT 2
- Since version 2.4.52 Apache stalls after some time HOT 1
- Update to 2.4.54 for security issues HOT 2
- /etc/httpd/conf/magic broken since version 2.4.54-1 HOT 1
- Update to 2.4.55 for security issues HOT 1
- update to 2.4.55 HOT 1
- httpd-2.4.56 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from httpd24u.