]> git.kaiwu.me - nginx.git/commit
SSL: $ssl_client_verify extended with a failure reason.
authorMaxim Dounin <mdounin@mdounin.ru>
Mon, 5 Dec 2016 19:23:22 +0000 (22:23 +0300)
committerMaxim Dounin <mdounin@mdounin.ru>
Mon, 5 Dec 2016 19:23:22 +0000 (22:23 +0300)
commit919f53632940cfa9b9f24fdffeaf1f3d5b4fc700
tree5469df7a20965071dc970548efb74d442720e417
parent27bcceb24bb562e080d1f894e8310ac74187173e
SSL: $ssl_client_verify extended with a failure reason.

Now in case of a verification failure $ssl_client_verify contains
"FAILED:<reason>", similar to Apache's SSL_CLIENT_VERIFY, e.g.,
"FAILED:certificate has expired".

Detailed description of possible errors can be found in the verify(1)
manual page as provided by OpenSSL.
src/event/ngx_event_openssl.c