]> git.kaiwu.me - nginx.git/commit
SSL: fixed "key values mismatch" with object cache inheritance.
authorSergey Kandaurov <pluknet@nginx.com>
Thu, 29 May 2025 13:49:48 +0000 (17:49 +0400)
committerSergey Kandaurov <s.kandaurov@f5.com>
Tue, 23 Dec 2025 18:40:33 +0000 (22:40 +0400)
commit592bda7bb6c202e48da8e4181de936f70edff58e
tree6a2670bdb178a626ed5733f466c0696f83d556e2
parentaa714a1e87bfd0f6807f4333a5b354de583e7e92
SSL: fixed "key values mismatch" with object cache inheritance.

In rare cases, it was possible to get into this error state on reload
with improperly updated file timestamps for certificate and key pairs.

The fix is to retry on X509_R_KEY_VALUES_MISMATCH, similar to 5d5d9adcc.
Additionally, loading SSL certificate is updated to avoid certificates
discarded on retry to appear in ssl->certs and in extra chain.
src/event/ngx_event_openssl.c
src/event/ngx_event_openssl_cache.c