]> git.kaiwu.me - nginx.git/commit
SSL: avoid SSL_CTX_set_tmp_rsa_callback() call with LibreSSL.
authorMaxim Dounin <mdounin@mdounin.ru>
Sun, 22 Mar 2015 23:42:34 +0000 (02:42 +0300)
committerMaxim Dounin <mdounin@mdounin.ru>
Sun, 22 Mar 2015 23:42:34 +0000 (02:42 +0300)
commita20c6d202edea3f56f90c9c4c75439e6d834623b
treea16b83d39ff8d8be62237c195f272b47e7a509e5
parentb0d8ff55a1560f4f373319075cd452992de8c74b
SSL: avoid SSL_CTX_set_tmp_rsa_callback() call with LibreSSL.

LibreSSL removed support for export ciphers and a call to
SSL_CTX_set_tmp_rsa_callback() results in an error left in the error
queue.  This caused alerts "ignoring stale global SSL error (...called
a function you should not call) while SSL handshaking" on a first connection
in each worker process.
src/http/modules/ngx_http_ssl_module.c
src/mail/ngx_mail_ssl_module.c