mirror/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2024-12-14 12:09:00 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
fd97b2a80f
nginx/src
History
Maxim Dounin fd97b2a80f SSL: server name callback changed to return SSL_TLSEXT_ERR_OK. 
OpenSSL 1.1.1 does not save server name to the session if server name
callback returns anything but SSL_TLSEXT_ERR_OK, thus breaking
the $ssl_server_name variable in resumed sessions.

Since $ssl_server_name can be used even if we've selected the default
server and there are no other servers, it looks like the only viable
solution is to always return SSL_TLSEXT_ERR_OK regardless of the actual
result.

To fix things in the stream module as well, added a dummy server name
callback which always returns SSL_TLSEXT_ERR_OK.
2019-03-03 16:47:44 +03:00
..
core Version bump. 2019-03-03 16:47:41 +03:00
event SSL: adjusted session id context with dynamic certificates. 2019-02-25 16:42:54 +03:00
http SSL: server name callback changed to return SSL_TLSEXT_ERR_OK. 2019-03-03 16:47:44 +03:00
mail SSL: adjusted session id context with dynamic certificates. 2019-02-25 16:42:54 +03:00
misc Style: aligned ngx_null_command. 2017-07-12 11:34:04 +03:00
os Fixed portability issues with union sigval. 2019-01-28 14:33:31 +00:00
stream SSL: server name callback changed to return SSL_TLSEXT_ERR_OK. 2019-03-03 16:47:44 +03:00