Bug#987156: mod_ssl depends on mod_setenvif while it does not

2021-04-22 Thread MichaIng
Am 19.04.2021 um 23:49 schrieb Stefan Fritsch: Am 18.04.21 um 17:10 schrieb MichaIng: The dependency is declared in /etc/apache2/mods-available/ssl.load and is a Debian packaging thing, not relevant to upstream. Now I see the "comment" in the .load files, thanks for the hint! I think it has b

Bug#951067: apache2: unable to disable TLSv1

2021-04-22 Thread MichaIng
I think "all" cannot be used like that. From the docs: https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslprotocol "all" is an alias for "+SSLv3 +TLSv1 +...", so while the raw config file syntax is fine, internally "-all" is probably seen as invalid and replaced by the default "SSLProtoco