BUGS   [plain text]

Known problems/bugs in neon                                      -*- text -*-

* several reports of issues with long-lived sessions causing problems
 with GSSAPI auth using mod_auth_kerb.  May be a server problem, but
 needs further investigation to be sure. 

* 2818 requires that a on rejection of the SSL server cert, a "bad certificate"
 message should be sent - this is not being done currently (and can probably
 only be done with OpenSSL by actually doing cert verification in the verify

* ne_lock_discover does not handle multiple (shared) locks on
  a single resource.

* SSL session caching issues; only cache for clean shutdowns, and
 only cache on shutdown, since the SSL_SESSION may change during
 an ne_session?

* perhaps allow a per-Server-header hack for "Darwin Streaming Server
4.0" which doesn't terminate the response headers:

HTTP/1.1 200 OK
Server: Darwin Streaming Server 4.0
Content-Type: audio/mpeg
Cache-Control: no-cache
Pragma: no-cache
Connection: close

* load_client_cert fails with:

  load_client_cert: (did not fail to load clicert without pkey)

  on RHEL4 openssl.