diff options
| author | Roman Arutyunyan <arut@nginx.com> | 2016-12-19 14:02:39 +0300 |
|---|---|---|
| committer | Roman Arutyunyan <arut@nginx.com> | 2016-12-19 14:02:39 +0300 |
| commit | 393636d79c836e360b14ca99f76996935ee02236 (patch) | |
| tree | 4a1d66131eb1ccad677701c37de6c5b81730f59a /src/stream/ngx_stream_ssl_preread_module.c | |
| parent | 853c208fc993957aaea059e799bf9765ba167421 (diff) | |
| download | nginx-393636d79c836e360b14ca99f76996935ee02236.tar.gz nginx-393636d79c836e360b14ca99f76996935ee02236.zip | |
Stream ssl_preread: relaxed SSL version check.
SSL version 3.0 can be specified by the client at the record level for
compatibility reasons. Previously, ssl_preread module rejected such
connections, presuming they don't have SNI. Now SSL 3.0 is allowed at
the record level.
Diffstat (limited to 'src/stream/ngx_stream_ssl_preread_module.c')
| -rw-r--r-- | src/stream/ngx_stream_ssl_preread_module.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/stream/ngx_stream_ssl_preread_module.c b/src/stream/ngx_stream_ssl_preread_module.c index e26c51891..2040b4fe8 100644 --- a/src/stream/ngx_stream_ssl_preread_module.c +++ b/src/stream/ngx_stream_ssl_preread_module.c @@ -142,7 +142,7 @@ ngx_stream_ssl_preread_handler(ngx_stream_session_t *s) return NGX_DECLINED; } - if (p[1] != 3 || p[2] == 0) { + if (p[1] != 3) { ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0, "ssl preread: unsupported SSL version"); return NGX_DECLINED; |