mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-06-07 17:52:38 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
The official NGINX Open Source repository.
5,700 Commits 22 Branches 572 Tags 102 MiB
C 97.6%
Vim Script 1.8%
XS 0.4%
Perl 0.1%
e844475905
Go to file
Maxim Dounin e844475905 SSL: made it possible to iterate though all certificates. 
A pointer to a previously configured certificate now stored in a certificate.
This makes it possible to iterate though all certificates configured in
the SSL context.  This is now used to configure OCSP stapling for all
certificates, and in ngx_ssl_session_id_context().

As SSL_CTX_use_certificate() frees previously loaded certificate of the same
type, and we have no way to find out if it's the case, X509_free() calls
are now posponed till ngx_ssl_cleanup_ctx().

Note that in OpenSSL 1.0.2+ this can be done without storing things in exdata
using the SSL_CTX_set_current_cert() and SSL_CTX_get0_certificate() functions.
These are not yet available in all supported versions though, so it's easier
to continue to use exdata for now.
2016-05-19 14:46:32 +03:00
auto Upstream: the "transparent" parameter of proxy_bind and friends. 2015-12-18 19:05:27 +03:00
conf Added the REQUEST_SCHEME parameter. 2015-06-05 22:23:26 +03:00
contrib Fixed spelling. 2016-04-07 11:50:13 +03:00
docs nginx-1.9.15-RELEASE 2016-04-19 19:02:37 +03:00
misc Removed the prototype mysql module. 2016-03-31 22:33:26 +03:00
src SSL: made it possible to iterate though all certificates. 2016-05-19 14:46:32 +03:00
.hgtags release-1.9.15 tag 2016-04-19 19:02:37 +03:00