diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2019-03-05 16:34:19 +0300 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2019-03-05 16:34:19 +0300 |
| commit | 0ad4393e30c119d250415cb769e3d8bc8dce5186 (patch) | |
| tree | aeb76719875f586c250d1d44e2fed066a99e988a /src/stream/ngx_stream_core_module.c | |
| parent | 0808b04c4690354aab43e0cdfe49588abb942e8c (diff) | |
| download | nginx-0ad4393e30c119d250415cb769e3d8bc8dce5186.tar.gz nginx-0ad4393e30c119d250415cb769e3d8bc8dce5186.zip | |
SSL: moved c->ssl->handshaked check in server name callback.
Server name callback is always called by OpenSSL, even
if server_name extension is not present in ClientHello. As such,
checking c->ssl->handshaked before the SSL_get_servername() result
should help to more effectively prevent renegotiation in
OpenSSL 1.1.0 - 1.1.0g, where neither SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS
nor SSL_OP_NO_RENEGOTIATION is available.
Diffstat (limited to 'src/stream/ngx_stream_core_module.c')
0 files changed, 0 insertions, 0 deletions