openresty

Commit Graph

Author	SHA1	Message	Date
spacewander	50b2da91c9	bugfix: supported OpenSSL 1.1.1 by upgrading the OpenSSL patch. Previously, we used ClientHello callback to do ssl session fetching non-blockingly. However, this way can not handle an edge case: the ssl session resumption via session ticket might fail, and the client falls back to session ID resumption. The ClientHello callback is run too early to know if the client will fall back to use session ID resumption. Therefore, we have to take back the OpenSSL sess_set_get_cb_yield patch and upgrade it to adapt OpenSSL 1.1.1. Thanks Yongjian Xu and crasyangel for their help.	6 years ago
spacewander	9e834398de	feature: updated the NGINX patches for async SSL session fetching to support OpenSSL 1.1.1. The patch was also renamed from `ssl_pending_session.patch` to `ssl_sess_cb_yield.patch` (similarly to the existing `ssl_cert_cb_yield.patch` one). Signed-off-by: Thibault Charbonnier <thibaultcha@me.com>	6 years ago

Author

SHA1

Message

Date

spacewander

50b2da91c9

bugfix: supported OpenSSL 1.1.1 by upgrading the OpenSSL patch.

Previously, we used ClientHello callback to do ssl session fetching
non-blockingly. However, this way can not handle an edge case: the ssl
session resumption via session ticket might fail, and the client falls
back to session ID resumption. The ClientHello callback is run too early
to know if the client will fall back to use session ID resumption.

Therefore, we have to take back the OpenSSL sess_set_get_cb_yield patch and
upgrade it to adapt OpenSSL 1.1.1.

Thanks Yongjian Xu and crasyangel for their help.

spacewander

9e834398de

feature: updated the NGINX patches for async SSL session fetching to support OpenSSL 1.1.1.

The patch was also renamed from `ssl_pending_session.patch` to
`ssl_sess_cb_yield.patch` (similarly to the existing
`ssl_cert_cb_yield.patch` one).

Signed-off-by: Thibault Charbonnier <thibaultcha@me.com>

2 Commits (50b2da91c9a3d7de370612cb60d3cb87f0e6f186)