https://bz.apache.org/bugzilla/show_bug.cgi?id=62691#c5
"Moving "SSLVerifyClient require" outside of the <Location> block instantly
returns the document. So it does appear to be ONLY the renegotiation case.
"
That works here too, in my simple test case. I had this location directive:
<Location />
SSLVerifyClient require
Require ssl-verify-client
</Location>
By moving SSLVerifyClient to the vhost level, i.e., the whole site
requires it, then re-negotiation isn't triggered and access works
without a timeout.
** Bug watch added: bz.apache.org/bugzilla/ #62691
https://bz.apache.org/bugzilla/show_bug.cgi?id=62691
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1833039
Title:
18.04/Apache2: rejecting client initiated renegotiation due to openssl
1.1.1
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/1833039/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
