[packages/apache] Limit badness only to IE2-5. See http://blogs.msdn.com/b/ieinternals/archive/2011/03/26/https-and-co

arekm arekm at pld-linux.org
Wed Nov 19 13:08:30 CET 2014


commit 84e3fb48943f389c39ceab9812753857f42e3645
Author: Arkadiusz Miśkiewicz <arekm at maven.pl>
Date:   Wed Nov 19 13:04:13 2014 +0100

    Limit badness only to IE2-5. See
    http://blogs.msdn.com/b/ieinternals/archive/2011/03/26/https-and-connection-close-is-your-apache-modssl-server-configuration-set-to-slow.aspx
    for more information. Found by zawadaa.

 apache-mod_ssl.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
---
diff --git a/apache-mod_ssl.conf b/apache-mod_ssl.conf
index da433b1..2acff5b 100644
--- a/apache-mod_ssl.conf
+++ b/apache-mod_ssl.conf
@@ -223,7 +223,7 @@ SSLCertificateKeyFile /etc/httpd/ssl/server.key
 #   their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
 #   "force-response-1.0" for this.
 <IfModule mod_setenvif.c>
-	BrowserMatch ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
+	BrowserMatch ".*MSIE [2-5]\..*" \ nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
 </IfModule>
 
 #   Per-Server Logging:
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/apache.git/commitdiff/96ae310e7af69335bd48b17c06da1bf1293ed865



More information about the pld-cvs-commit mailing list