]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a20c6d2) | patch
SSL: use of SSL_MODE_NO_AUTO_CHAIN.
authorMaxim Dounin <mdounin@mdounin.ru>
Sun, 22 Mar 2015 23:42:35 +0000 (02:42 +0300)
committerMaxim Dounin <mdounin@mdounin.ru>
Sun, 22 Mar 2015 23:42:35 +0000 (02:42 +0300)
commit47c44355b597da41b9b5159a5678525e00bea3bd
treefb6b6a11ed55a7cb8ef202830cfddffe638a118etree | snapshot
parenta20c6d202edea3f56f90c9c4c75439e6d834623bcommit | diff
SSL: use of SSL_MODE_NO_AUTO_CHAIN.

The SSL_MODE_NO_AUTO_CHAIN mode prevents OpenSSL from automatically
building a certificate chain on the fly if there is no certificate chain
explicitly provided.  Before this change, certificates provided via the
ssl_client_certificate and ssl_trusted_certificate directives were
used by OpenSSL to automatically build certificate chains, resulting
in unexpected (and in some cases unneeded) chains being sent to clients.
src/event/ngx_event_openssl.c diff | blob | history
nginx upstream