Bug 1021469

Summary:	[RFE] Support ability to share mod_proxy with other SSL providers
Product:	[Fedora] Fedora	Reporter:	Martin Kosek <mkosek>
Component:	mod_nss	Assignee:	Matthew Harmsen <mharmsen>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	medium
Version:	20	CC:	ddumas, dpal, jgalipea, jorton, jpazdziora, mharmsen, nkinder, pbrobinson, rcritten
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:	835071	Environment:
Last Closed:	2014-05-12 13:57:20 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	805720, 835071
Bug Blocks:	791327, 881827, 1021458

Description Martin Kosek 2013-10-21 11:13:57 UTC

Description of problem:

mod_proxy provides a single hook for providing SSL services but there are two SSL engines available in Apache.

Currently mod_ssl always registers these hooks. mod_nss will register them if they are free.

This means that if the mod_ssl module is loaded in Apache at all, even if it isn't configured, then mod_proxy is unavailable to mod_nss.

We need some negotiation mechanism where both SSL engines can be support simultaneously.

When this capability is added to mod_proxy and mod_ssl it should be added to mod_nss as well so they can cooperate.

Comment 1 Matthew Harmsen 2013-10-23 21:08:43 UTC

This bug has been addressed by the patch called 'mod_nss-sslmultiproxy_2.patch'.

Comment 2 Fedora Update System 2013-10-24 21:14:03 UTC

mod_nss-1.0.8-24.fc18 has been submitted as an update for Fedora 18.
https://admin.fedoraproject.org/updates/mod_nss-1.0.8-24.fc18

Comment 3 Fedora Update System 2013-10-24 21:25:26 UTC

mod_nss-1.0.8-24.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/mod_nss-1.0.8-24.fc19

Comment 4 Fedora Update System 2013-10-24 21:39:35 UTC

mod_nss-1.0.8-24.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/mod_nss-1.0.8-24.fc20

Comment 5 Fedora Update System 2013-11-06 07:35:25 UTC

mod_nss-1.0.8-24.fc18 has been pushed to the Fedora 18 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 6 Fedora Update System 2013-11-06 07:37:39 UTC

mod_nss-1.0.8-24.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Fedora Update System 2013-11-10 07:18:17 UTC

mod_nss-1.0.8-24.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.