mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-06-07 17:52:38 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

Stream ssl_preread: added SSLv2 Client Hello support.

Browse Source 
In particular, it was not possible to obtain SSLv2 protocol version.
This commit is contained in:
Sergey Kandaurov 2018-07-18 18:51:25 +03:00
parent 372b624627
commit b93931ae82
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/stream/ngx_stream_ssl_preread_module.c
View File

@ -149,6 +149,14 @@ ngx_stream_ssl_preread_handler(ngx_stream_session_t *s)
while (last - p >= 5) { while (last - p >= 5) {
if ((p[0] & 0x80) && p[2] == 1 && (p[3] == 0 || p[3] == 3)) {
ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
"ssl preread: version 2 ClientHello");
ctx->version[0] = p[3];
ctx->version[1] = p[4];
return NGX_OK;
}
if (p[0] != 0x16) { if (p[0] != 0x16) {
ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0, ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
"ssl preread: not a handshake"); "ssl preread: not a handshake");
@ -507,8 +515,12 @@ ngx_stream_ssl_preread_protocol_variable(ngx_stream_session_t *s,
ngx_str_null(&version); ngx_str_null(&version);
switch (ctx->version[0]) { switch (ctx->version[0]) {
case 2: case 0:
ngx_str_set(&version, "SSLv2"); switch (ctx->version[1]) {
case 2:
ngx_str_set(&version, "SSLv2");
break;
}
break; break;
case 3: case 3:
switch (ctx->version[1]) { switch (ctx->version[1]) {