]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c0134de) | patch
SSL: disabled renegotiation checks with LibreSSL.
authorSergey Kandaurov <pluknet@nginx.com>
Mon, 25 Dec 2023 17:15:47 +0000 (21:15 +0400)
committerSergey Kandaurov <pluknet@nginx.com>
Mon, 25 Dec 2023 17:15:47 +0000 (21:15 +0400)
commitd7923960a824d0dd9f4b0c35101e68d71692d1e9
treead07fac57806a3832fcc3b2b7bc4cc8a90feba9ftree | snapshot
parentc0134ded9fce48f36465cb1a1adbcc52e32f8c65commit | diff
SSL: disabled renegotiation checks with LibreSSL.

Similar to 7356:e3ba4026c02d, as long as SSL_OP_NO_CLIENT_RENEGOTIATION
is defined, it is the library responsibility to prevent renegotiation.

Additionally, this allows to raise LibreSSL version used to redefine
OPENSSL_VERSION_NUMBER to 0x1010000fL, such that this won't result in
attempts to dereference SSL objects made opaque in LibreSSL 3.4.0.

Patch by Maxim Dounin.
src/event/ngx_event_openssl.c diff | blob | history
nginx upstream