diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2015-03-23 02:42:35 +0300 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2015-03-23 02:42:35 +0300 |
| commit | 47c44355b597da41b9b5159a5678525e00bea3bd (patch) | |
| tree | fb6b6a11ed55a7cb8ef202830cfddffe638a118e /src/core/ngx_thread_pool.c | |
| parent | a20c6d202edea3f56f90c9c4c75439e6d834623b (diff) | |
| download | nginx-47c44355b597da41b9b5159a5678525e00bea3bd.tar.gz nginx-47c44355b597da41b9b5159a5678525e00bea3bd.zip | |
SSL: use of SSL_MODE_NO_AUTO_CHAIN.
The SSL_MODE_NO_AUTO_CHAIN mode prevents OpenSSL from automatically
building a certificate chain on the fly if there is no certificate chain
explicitly provided. Before this change, certificates provided via the
ssl_client_certificate and ssl_trusted_certificate directives were
used by OpenSSL to automatically build certificate chains, resulting
in unexpected (and in some cases unneeded) chains being sent to clients.
Diffstat (limited to 'src/core/ngx_thread_pool.c')
0 files changed, 0 insertions, 0 deletions