More info at BZ1251796
Use the doc from rhbz 1251796
Hi Jean-frederic, just to make sure that I am understanding the current status properly: The sibling Bug#1251796 filed against Jboss Web being fixed and verified means that the fix is the same for EAP, right? And the fix consists in upgrading of openssl to 1.0.2h (plus some additional configuration allowed by the upgrade).
correct rhbz 1251796 + some additional configuration/documented allowed by the upgrade are the fix.
Assigning this to me so that I can dev_ack+ in addition to setting status to MODIFIED.
I cannot dev_ack anyway :(
EAP will shil EWS 2.1.1 with OpenSSL 1.0.2. httpd 2.2.26 cannot add dhparams as a special directive, but it is possible to ad them at the end of certificate file. VERIFIED
Retroactively bulk-closing issues from released EAP 6.4 cumulative patches.