diff options
author | Maxim Dounin <mdounin@mdounin.ru> | 2019-03-03 16:47:44 +0300 |
---|---|---|
committer | Maxim Dounin <mdounin@mdounin.ru> | 2019-03-03 16:47:44 +0300 |
commit | fd97b2a80f678b9bf372d9a6537e5d4db51188ae (patch) | |
tree | c85542d597fa6e84674bb90237a9523ee7ec65cf /src/core/ngx_inet.c | |
parent | 4e0c46cfe12ad57e312a83b689ef1a7cf94dcd3d (diff) | |
download | nginx-fd97b2a80f678b9bf372d9a6537e5d4db51188ae.tar.gz nginx-fd97b2a80f678b9bf372d9a6537e5d4db51188ae.zip |
SSL: server name callback changed to return SSL_TLSEXT_ERR_OK.
OpenSSL 1.1.1 does not save server name to the session if server name
callback returns anything but SSL_TLSEXT_ERR_OK, thus breaking
the $ssl_server_name variable in resumed sessions.
Since $ssl_server_name can be used even if we've selected the default
server and there are no other servers, it looks like the only viable
solution is to always return SSL_TLSEXT_ERR_OK regardless of the actual
result.
To fix things in the stream module as well, added a dummy server name
callback which always returns SSL_TLSEXT_ERR_OK.
Diffstat (limited to 'src/core/ngx_inet.c')
0 files changed, 0 insertions, 0 deletions