Re: Apache Optionsbleed
You're probably right. I can tell you that optionsbleed has already ruined my weekend.
2 publicly visible posts • joined 22 Sep 2017
My wager is this "feature":
https://support.citrix.com/article/CTX227241
The listed solution actually isn't one. We've seen a use case where we'd have to delete all valid certs before installing another. So right now if you upgrade to 11.1.55 or later, none of the builds recognize any certificates with this condition = none of your sh*t works after the required reboot.
We ran into it and had to forcefully downgrade to unaffected version that happened to be still on our netscalers. Completely stupid but critical issue. And more importantly the customer has 0 control over the CA or certificate properties.