18764604 Apache should not enable pkcs11 engine by default on T4/T4+ platforms s11-update
authorPetr Sumbera <petr.sumbera@oracle.com>
Wed, 18 Mar 2015 05:13:54 -0700
branchs11-update
changeset 3969 c01cdd40f814
parent 3968 266f10e491cb
child 3970 583d5d25d4e9
18764604 Apache should not enable pkcs11 engine by default on T4/T4+ platforms
components/apache2/patches/ssl.conf.patch
--- a/components/apache2/patches/ssl.conf.patch	Wed Mar 18 05:06:38 2015 -0700
+++ b/components/apache2/patches/ssl.conf.patch	Wed Mar 18 05:13:54 2015 -0700
@@ -1,3 +1,6 @@
+Patch origin: in-house
+Patch status: Solaris-specific; not suitable for upstream
+
 --- docs/conf/extra/httpd-ssl.conf.in	Wed Jan  4 12:10:40 2012
 +++ docs/conf/extra/httpd-ssl.conf.in	Mon Feb 27 07:09:48 2012
 @@ -22,11 +22,16 @@
@@ -11,9 +14,9 @@
 +SSLRandomSeed connect file:/dev/urandom 512
  
 +#
-+# Enable Solaris crypto framework
++# Enable Solaris crypto framework (recommended for T1/T2/T3 based systems)
 +#
-+SSLCryptoDevice pkcs11
++#SSLCryptoDevice pkcs11
  
 +
  #