]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b4276f2) | patch
OCSP stapling: staple now extracted via SSL_get_certificate().
authorMaxim Dounin <mdounin@mdounin.ru>
Thu, 19 May 2016 11:46:32 +0000 (14:46 +0300)
committerMaxim Dounin <mdounin@mdounin.ru>
Thu, 19 May 2016 11:46:32 +0000 (14:46 +0300)
commit40e075c3254c18a3dde2dd801f71664c3982845a
tree4ce9cb6c4d4b87f281ba9b02e55f85f829d57ffdtree | snapshot
parentb4276f2447824092f094ca4b681be1465e9bfedecommit | diff
OCSP stapling: staple now extracted via SSL_get_certificate().

This makes it possible to properly return OCSP staple with multiple
certificates configured.

Note that it only works properly in OpenSSL 1.0.1d+, 1.0.0k, 0.9.8y+.
In older versions SSL_get_certificate() fails to return correct certificate
when the certificate status callback is called.
src/event/ngx_event_openssl_stapling.c diff | blob | history
nginx upstream