]> git.kaiwu.me - nginx.git/commit
SSL: removed export ciphers support.
authorSergey Kandaurov <pluknet@nginx.com>
Tue, 10 Aug 2021 20:43:17 +0000 (23:43 +0300)
committerSergey Kandaurov <pluknet@nginx.com>
Tue, 10 Aug 2021 20:43:17 +0000 (23:43 +0300)
commit9e4e7a4e4202b5b61b785998e143c6ae0a39883c
tree20830bf04da526743c829330257697fdecd379c7
parent5155845ce4453a07d60e2ce43946c9181bc311fa
SSL: removed export ciphers support.

Export ciphers are forbidden to negotiate in TLS 1.1 and later protocol modes.
They are disabled since OpenSSL 1.0.2g by default unless explicitly configured
with "enable-weak-ssl-ciphers", and completely removed in OpenSSL 1.1.0.
src/event/ngx_event_openssl.c
src/event/ngx_event_openssl.h