aboutsummaryrefslogtreecommitdiff
path: root/src/stream/ngx_stream_ssl_preread_module.c
Commit message (Collapse)AuthorAge
* Stream ssl_preread: do not reallocate a parsed SNI host.Sergey Kandaurov2024-08-09
| | | | We own this memory from the session pool.
* Stream: virtual servers.Roman Arutyunyan2023-12-14
| | | | | | | | | Server name is taken either from ngx_stream_ssl_module or ngx_stream_ssl_preread_module. The change adds "default_server" parameter to the "listen" directive, as well as the following directives: "server_names_hash_max_size", "server_names_hash_bucket_size", "server_name" and "ssl_reject_handshake".
* Stream ssl_preread: added SSLv2 Client Hello support.Sergey Kandaurov2018-07-18
| | | | In particular, it was not possible to obtain SSLv2 protocol version.
* Stream ssl_preread: $ssl_preread_protocol variable.Roman Arutyunyan2018-07-11
| | | | | | | | | The variable keeps the latest SSL protocol version supported by the client. The variable has the same format as $ssl_protocol. The version is read from the client_version field of ClientHello. If the supported_versions extension is present in the ClientHello, then the version is set to TLSv1.3.
* Style.Roman Arutyunyan2018-03-12
|
* Stream ssl_preread: $ssl_preread_alpn_protocols variable.Roman Arutyunyan2018-03-12
| | | | | The variable keeps a comma-separated list of protocol names from ALPN TLS extension defined by RFC 7301.
* Variables: macros for null variables.Ruslan Ermilov2017-08-01
| | | | No functional changes.
* Stream ssl_preread: relaxed SSL version check.Roman Arutyunyan2016-12-19
| | | | | | | SSL version 3.0 can be specified by the client at the record level for compatibility reasons. Previously, ssl_preread module rejected such connections, presuming they don't have SNI. Now SSL 3.0 is allowed at the record level.
* Stream ssl_preread: fixed $ssl_preread_server_name variable.Sergey Kandaurov2016-10-05
| | | | Made sure to set the variable length only after successful SNI parsing.
* Stream ssl_preread: removed internal macro.Vladimir Homutov2016-09-15
| | | | The ngx_log_debug() macro is internal and should not be used.
* Stream: ssl_preread module.Vladimir Homutov2016-09-15
The ssl_preread module extracts information from the SSL Client Hello message without terminating SSL. Currently, only $ssl_preread_server_name variable is supported, which contains server name from the SNI extension.