]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 152d92b) | patch
SSL: session id context now includes certificate hash.
authorMaxim Dounin <mdounin@mdounin.ru>
Mon, 15 Sep 2014 13:59:47 +0000 (17:59 +0400)
committerMaxim Dounin <mdounin@mdounin.ru>
Mon, 15 Sep 2014 13:59:47 +0000 (17:59 +0400)
commit6ec0f4d85b7fa4b74e7c758563b673fc19628411
tree1fa1c200a2ebf4d9468ce4a7954f1c8564f076b0tree | snapshot
parent152d92b4b76303d7b2d64e76cadf6d466df48f7fcommit | diff
SSL: session id context now includes certificate hash.

This prevents inappropriate session reuse in unrelated server{}
blocks, while preserving ability to restore sessions on other servers
when using TLS Session Tickets.

Additionally, session context is now set even if there is no session cache
configured.  This is needed as it's also used for TLS Session Tickets.

Thanks to Antoine Delignat-Lavaud and Piotr Sikora.
src/event/ngx_event_openssl.c diff | blob | history
nginx upstream