]> git.kaiwu.me - nginx.git/commit
SSL: ciphers now set before loading certificates (ticket #2035).
authorMaxim Dounin <mdounin@mdounin.ru>
Mon, 16 Aug 2021 19:40:31 +0000 (22:40 +0300)
committerMaxim Dounin <mdounin@mdounin.ru>
Mon, 16 Aug 2021 19:40:31 +0000 (22:40 +0300)
commitce5996cdd1b2e150f645efbc337e5a681dbe241c
tree7474e80d643bbd397d62ceb0192da067044b5fcb
parentb381cbc085502b76a1db3f4439ccec5bb01b5a54
SSL: ciphers now set before loading certificates (ticket #2035).

To load old/weak server or client certificates it might be needed to adjust
the security level, as introduced in OpenSSL 1.1.0.  This change ensures that
ciphers are set before loading the certificates, so security level changes
via the cipher string apply to certificate loading.
src/http/modules/ngx_http_grpc_module.c
src/http/modules/ngx_http_proxy_module.c
src/http/modules/ngx_http_ssl_module.c
src/http/modules/ngx_http_uwsgi_module.c
src/mail/ngx_mail_ssl_module.c
src/stream/ngx_stream_proxy_module.c
src/stream/ngx_stream_ssl_module.c