Known problems/bugs in neon -*- text -*- --------------------------- * several reports of issues with long-lived sessions causing problems with GSSAPI auth using mod_auth_kerb. May be a server problem, but needs further investigation to be sure. * 2818 requires that a on rejection of the SSL server cert, a "bad certificate" message should be sent - this is not being done currently (and can probably only be done with OpenSSL by actually doing cert verification in the verify callback) * ne_lock_discover does not handle multiple (shared) locks on a single resource. * SSL session caching issues; only cache for clean shutdowns, and only cache on shutdown, since the SSL_SESSION may change during an ne_session? * It would be nice to fail with a friendly error message if a client cert is requested by the srever but one is not provided. Currently, returning -1 from the provide_client_cert function would allow that (as it forces the SSL handshake to fail), but that would prevent opportunistic use of client certificates, of the "SSLVerifyClient optional" variety. * perhaps allow a per-Server-header hack for "Darwin Streaming Server 4.0" which doesn't terminate the response headers: http://bugzilla.gnome.org/show_bug.cgi?id=366331 HTTP/1.1 200 OK Server: Darwin Streaming Server 4.0 Content-Type: audio/mpeg Cache-Control: no-cache Pragma: no-cache Connection: close W8޳����s0��
