Information Disclosure vulnerability related to SSL Private Keys and CSR used by the HTTP daemon

[gtrentalancia]

Information Disclosure vulnerability related to SSL Private Keys and CSR used by the HTTP daemon

[gtrentalancia]

Please note that if the Reference Policy previous to merging of #735 and #736 is actually being used on running servers, then the two vulnerabilities might need to be reported on public databases such as those maintained CISA (https://www.cisa.gov/report), NIST (https://nvd.nist.gov) or Mitre (https://cve.mitre.org).

Finally if there are instances of the Reference Policy deployed on HTTP, IMAP, SMTP or LDAP servers prior to merging of #735 and #736 using TLS/SSL Private Keys at the involved file locations, then those TLS/SSL Certificates and Private Keys would need to be revoked and regenerated, as they might have been leaked and compromised.

[gtrentalancia]

See also #739 for a further required file context fix.